| Offset 1, 6 lines modified | Offset 1, 6 lines modified | ||
| 1 | · | 1 | ·0b9427ac6886b61eb4027c948d7be2a1·153168·admin·optional·ssg-applications_0.1.74-1_all.deb |
| 2 | ·ac8190c89a75a5ee928afbdbfeafe241·31300·admin·optional·ssg-base_0.1.74-1_all.deb | 2 | ·ac8190c89a75a5ee928afbdbfeafe241·31300·admin·optional·ssg-base_0.1.74-1_all.deb |
| 3 | ·883f0882c331cd7430cd08fde746b899·2808940·admin·optional·ssg-debderived_0.1.74-1_all.deb | ||
| 4 | ·febdb41a92858a663772c8e24613f79a·1232184·admin·optional·ssg-debian_0.1.74-1_all.deb | ||
| 5 | · | 3 | ·c78a9b0b366b0d21f4238685ecedc113·2807424·admin·optional·ssg-debderived_0.1.74-1_all.deb |
| 4 | ·c42170e2f6d8f0d00d2fed3ee9a98da9·1232064·admin·optional·ssg-debian_0.1.74-1_all.deb | ||
| 5 | ·e2170d526e4aae0a4cdde34463b0932c·32355192·admin·optional·ssg-nondebian_0.1.74-1_all.deb | ||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····1728·2024-11-02·18:39:34.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0·····1728·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0···1512 | 3 | -rw-r--r--···0········0········0···151248·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037fe0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037ff0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037ff0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038000:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038000:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038010:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038010:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038020:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038020:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038030:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038030:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00038040:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00038040:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00038050:·6f66·2032·3032·342d·3131·2d30·3 | 00038050:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00038060:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00038060:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00038070:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00038070:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00038080:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00038080:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00038090:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00038090:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000380a0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000380a0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000380b0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000380b0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000380c0:·636f·6e74·656e·745f·6772·6f75·705f·6368··content_group_ch | 000380c0:·636f·6e74·656e·745f·6772·6f75·705f·6368··content_group_ch |
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Upstream·STIG·for·Google·Chromium | 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Upstream·STIG·for·Google·Chromium |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/a:google:chromium-browser | 54 | ····*·cpe:/a:google:chromium-browser |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8C_\x8h_\x8r_\x8o_\x8m_\x8i_\x8u_\x8m | 59 | ···1.·_\x8C_\x8h_\x8r_\x8o_\x8m_\x8i_\x8u_\x8m |
| 60 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 61 | Group ·Guide·to·the·Secure·Configuration·of·Chromium· Group·contains·1·group·and·37 | 61 | Group ·Guide·to·the·Secure·Configuration·of·Chromium· Group·contains·1·group·and·37 |
| 62 | rules | 62 | rules |
| 63 | Group ·Chromium· Group·contains·37·rules | 63 | Group ·Chromium· Group·contains·37·rules |
| 64 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Chromium·is·an·open-source·web·browser,·powered·by·WebKit·(Blink),·and | 64 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Chromium·is·an·open-source·web·browser,·powered·by·WebKit·(Blink),·and |
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037fa0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037fb0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037fb0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037fc0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037fc0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037fd0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037fd0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037fe0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037fe0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037ff0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037ff0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038000:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038000:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038010:·6173·206f·6620·3230·3234·2d31·312d·303 | 00038010:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00038020:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038020:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038030:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038030:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038040:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038040:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038050:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038050:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038060:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038060:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038070:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038070:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038080:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038080:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis-node | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis-node |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 | 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 |
| 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 | 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 |
| 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 | 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 56 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 57 | Group ·Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service | 57 | Group ·Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service |
| 58 | Group·contains·3·groups·and·15·rules | 58 | Group·contains·3·groups·and·15·rules |
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037fa0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037fb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037fb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037fc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037fc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037fd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037fd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037fe0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037fe0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037ff0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037ff0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038000:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038000:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038010:·342d·3131·2d30·3 | 00038010:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 00038020:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038020:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038030:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038030:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038040:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038040:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038050:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038050:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038060:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038060:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038070:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038070:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038080:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00038080:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 | 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 |
| 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 | 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 |
| 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 | 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 56 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 57 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 58 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037cd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037cd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037ce0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037ce0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cf0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cf0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d00:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d00:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d20:·6173·206f·6620·3230·3234·2d31·312d·303 | 00037d20:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00037d30:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d30:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d40:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d40:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d50:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d50:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d60:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d60:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d70:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d70:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d80:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d80:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d90:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d90:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CUSP·-·Common·User·Security·Profile·for·Mozilla·Firefox | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CUSP·-·Common·User·Security·Profile·for·Mozilla·Firefox |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cusp_firefox | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cusp_firefox |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/a:mozilla:firefox | 41 | ····*·cpe:/a:mozilla:firefox |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x | 46 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x |
| 47 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·1·group | 48 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·1·group |
| 49 | and·9·rules | 49 | and·9·rules |
| 50 | Group ·Firefox· Group·contains·9·rules | 50 | Group ·Firefox· Group·contains·9·rules |
| 51 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Firefox·is·an·open-source·web·browser·and·developed·by·Mozilla.·Web | 51 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Firefox·is·an·open-source·web·browser·and·developed·by·Mozilla.·Web |
| Offset 14332, 15 lines modified | Offset 14332, 15 lines modified | ||
| 00037fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038020:·342d·3131·2d30·3 | 00038020:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 00038030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038090:·745f·6772·6f75·705f·6669·7265·666f·7822··t_group_firefox" | 00038090:·745f·6772·6f75·705f·6669·7265·666f·7822··t_group_firefox" |
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Mozilla·Firefox·STIG | 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Mozilla·Firefox·STIG |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/a:mozilla:firefox | 54 | ····*·cpe:/a:mozilla:firefox |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x | 59 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x |
| 60 | ·········1.·_\x8T_\x8h_\x8e_\x8·_\x8D_\x8o_\x8D_\x8·_\x8R_\x8o_\x8o_\x8t_\x8·_\x8C_\x8e_\x8r_\x8t_\x8i_\x8f_\x8i_\x8c_\x8a_\x8t_\x8e_\x8·_\x8I_\x8s_\x8·_\x8R_\x8e_\x8q_\x8u_\x8i_\x8r_\x8e_\x8d | 60 | ·········1.·_\x8T_\x8h_\x8e_\x8·_\x8D_\x8o_\x8D_\x8·_\x8R_\x8o_\x8o_\x8t_\x8·_\x8C_\x8e_\x8r_\x8t_\x8i_\x8f_\x8i_\x8c_\x8a_\x8t_\x8e_\x8·_\x8I_\x8s_\x8·_\x8R_\x8e_\x8q_\x8u_\x8i_\x8r_\x8e_\x8d |
| 61 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·2·groups | 62 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·2·groups |
| 63 | and·34·rules | 63 | and·34·rules |
| 64 | Group ·Firefox· Group·contains·1·group·and·34·rules | 64 | Group ·Firefox· Group·contains·1·group·and·34·rules |
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2024-11-0 | 36 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of | 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 1666, 15 lines modified | Offset 1666, 15 lines modified | ||
| 1666 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> | 1666 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> |
| 1667 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> | 1667 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> |
| 1668 | ··········</xccdf-1.2:check> | 1668 | ··········</xccdf-1.2:check> |
| 1669 | ········</xccdf-1.2:Rule> | 1669 | ········</xccdf-1.2:Rule> |
| 1670 | ······</xccdf-1.2:Group> | 1670 | ······</xccdf-1.2:Group> |
| 1671 | ····</xccdf-1.2:Benchmark> | 1671 | ····</xccdf-1.2:Benchmark> |
| 1672 | ··</ds:component> | 1672 | ··</ds:component> |
| 1673 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2024-11-0 | 1673 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 1674 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1674 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1675 | ······<oval-def:generator> | 1675 | ······<oval-def:generator> |
| 1676 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1676 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1677 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 1677 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 1678 | ········<oval:schema_version>5.11</oval:schema_version> | 1678 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1679 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 1679 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 1680 | ······</oval-def:generator> | 1680 | ······</oval-def:generator> |
| Offset 2530, 464 lines modified | Offset 2530, 464 lines modified | ||
| 2530 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> | 2530 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> |
| 2531 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> | 2531 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> |
| 2532 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> | 2532 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> |
| 2533 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> | 2533 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> |
| 2534 | ······</oval-def:variables> | 2534 | ······</oval-def:variables> |
| 2535 | ····</oval-def:oval_definitions> | 2535 | ····</oval-def:oval_definitions> |
| 2536 | ··</ds:component> | 2536 | ··</ds:component> |
| 2537 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2024-11-0 | 2537 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 2538 | ····<ocil:ocil> | 2538 | ····<ocil:ocil> |
| 2539 | ······<ocil:generator> | 2539 | ······<ocil:generator> |
| 2540 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2540 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2541 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 2541 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 2542 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2542 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2543 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 2543 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 2544 | ······</ocil:generator> | 2544 | ······</ocil:generator> |
| 2545 | ······<ocil:questionnaires> | 2545 | ······<ocil:questionnaires> |
| 2546 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2546 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_google_sync_ocil:questionnaire:1"> |
| 2547 | ··········<ocil:title> | 2547 | ··········<ocil:title>Disable·Data·Synchronization·to·Google</ocil:title> |
| 2548 | ··········<ocil:actions> | 2548 | ··········<ocil:actions> |
| 2549 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2549 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_google_sync_action:testaction:1</ocil:test_action_ref> |
| 2550 | ··········</ocil:actions> | 2550 | ··········</ocil:actions> |
| 2551 | ········</ocil:questionnaire> | 2551 | ········</ocil:questionnaire> |
| 2552 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2552 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> |
| 2553 | ··········<ocil:title>Disable· | 2553 | ··········<ocil:title>Disable·Background·Processing</ocil:title> |
| 2554 | ··········<ocil:actions> | 2554 | ··········<ocil:actions> |
| 2555 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2555 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> |
| 2556 | ··········</ocil:actions> | 2556 | ··········</ocil:actions> |
| 2557 | ········</ocil:questionnaire> | 2557 | ········</ocil:questionnaire> |
| 2558 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2558 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_encrypted_searching_ocil:questionnaire:1"> |
| 2559 | ··········<ocil:title> | 2559 | ··········<ocil:title>Enable·Encrypted·Searching</ocil:title> |
| 2560 | ··········<ocil:actions> | 2560 | ··········<ocil:actions> |
| 2561 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2561 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_encrypted_searching_action:testaction:1</ocil:test_action_ref> |
| 2562 | ··········</ocil:actions> | 2562 | ··········</ocil:actions> |
| 2563 | ········</ocil:questionnaire> | 2563 | ········</ocil:questionnaire> |
| 2564 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2564 | ········<ocil:questionnaire·id="ocil:ssg-chromium_block_desktop_notifications_ocil:questionnaire:1"> |
| 2565 | ··········<ocil:title> | 2565 | ··········<ocil:title>Prevent·Desktop·Notifications</ocil:title> |
| 2566 | ··········<ocil:actions> | 2566 | ··········<ocil:actions> |
| 2567 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2567 | ············<ocil:test_action_ref>ocil:ssg-chromium_block_desktop_notifications_action:testaction:1</ocil:test_action_ref> |
| 2568 | ··········</ocil:actions> | 2568 | ··········</ocil:actions> |
| 2569 | ········</ocil:questionnaire> | 2569 | ········</ocil:questionnaire> |
| 2570 | ········<ocil:questionnaire·id="ocil:ssg-chromium_d | 2570 | ········<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_ocil:questionnaire:1"> |
| 2571 | ··········<ocil:title> | 2571 | ··········<ocil:title>Enable·the·Default·Search·Provider</ocil:title> |
| 2572 | ··········<ocil:actions> | 2572 | ··········<ocil:actions> |
| 2573 | ············<ocil:test_action_ref>ocil:ssg-chromium_d | 2573 | ············<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_action:testaction:1</ocil:test_action_ref> |
| 2574 | ··········</ocil:actions> | 2574 | ··········</ocil:actions> |
| 2575 | ········</ocil:questionnaire> | 2575 | ········</ocil:questionnaire> |
| 2576 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2576 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_protocol_schemas_ocil:questionnaire:1"> |
| 2577 | ··········<ocil:title>Disable· | 2577 | ··········<ocil:title>Disable·Insecure·And·Obsolete·Protocol·Schemas</ocil:title> |
| 2578 | ··········<ocil:actions> | 2578 | ··········<ocil:actions> |
| 2579 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2579 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_protocol_schemas_action:testaction:1</ocil:test_action_ref> |
| 2580 | ··········</ocil:actions> | 2580 | ··········</ocil:actions> |
| 2581 | ········</ocil:questionnaire> | 2581 | ········</ocil:questionnaire> |
| 2582 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disa | 2582 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_metrics_reporting_ocil:questionnaire:1"> |
| 2583 | ··········<ocil:title>Disable· | 2583 | ··········<ocil:title>Disable·Metrics·Reporting</ocil:title> |
| 2584 | ··········<ocil:actions> | 2584 | ··········<ocil:actions> |
| 2585 | ············<ocil:test_action_ref>ocil:ssg-chromium_disa | 2585 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_metrics_reporting_action:testaction:1</ocil:test_action_ref> |
| 2586 | ··········</ocil:actions> | 2586 | ··········</ocil:actions> |
| 2587 | ········</ocil:questionnaire> | 2587 | ········</ocil:questionnaire> |
| 2588 | ········<ocil:questionnaire·id="ocil:ssg-chromium_p | 2588 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_plugin_blacklist_ocil:questionnaire:1"> |
| 2589 | ··········<ocil:title> | 2589 | ··········<ocil:title>Disable·All·Plugins·by·Default</ocil:title> |
| 2590 | ··········<ocil:actions> | 2590 | ··········<ocil:actions> |
| 2591 | ············<ocil:test_action_ref>ocil:ssg-chromium_p | 2591 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_plugin_blacklist_action:testaction:1</ocil:test_action_ref> |
| 2592 | ··········</ocil:actions> | 2592 | ··········</ocil:actions> |
| 2593 | ········</ocil:questionnaire> | 2593 | ········</ocil:questionnaire> |
| 2594 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2594 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_session_cookies_ocil:questionnaire:1"> |
| 2595 | ··········<ocil:title>Disable· | 2595 | ··········<ocil:title>Disable·Session·Cookies</ocil:title> |
| 2596 | ··········<ocil:actions> | 2596 | ··········<ocil:actions> |
| 2597 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2597 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_session_cookies_action:testaction:1</ocil:test_action_ref> |
| 2598 | ··········</ocil:actions> | 2598 | ··········</ocil:actions> |
| 2599 | ········</ocil:questionnaire> | 2599 | ········</ocil:questionnaire> |
| 2600 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2600 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_browser_history_ocil:questionnaire:1"> |
| 2601 | ··········<ocil:title> | 2601 | ··········<ocil:title>Enable·Saving·the·Browser·History</ocil:title> |
| 2602 | ··········<ocil:actions> | 2602 | ··········<ocil:actions> |
| 2603 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2603 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_browser_history_action:testaction:1</ocil:test_action_ref> |
| 2604 | ··········</ocil:actions> | 2604 | ··········</ocil:actions> |
| 2605 | ········</ocil:questionnaire> | 2605 | ········</ocil:questionnaire> |
| 2606 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2606 | ········<ocil:questionnaire·id="ocil:ssg-chromium_http_authentication_ocil:questionnaire:1"> |
| 2607 | ··········<ocil:title> | 2607 | ··········<ocil:title>Set·Chromium's·HTTP·Authentication·Scheme</ocil:title> |
| 2608 | ··········<ocil:actions> | 2608 | ··········<ocil:actions> |
| 2609 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2609 | ············<ocil:test_action_ref>ocil:ssg-chromium_http_authentication_action:testaction:1</ocil:test_action_ref> |
| 2610 | ··········</ocil:actions> | 2610 | ··········</ocil:actions> |
| 2611 | ········</ocil:questionnaire> | 2611 | ········</ocil:questionnaire> |
| 2612 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2612 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_search_suggestions_ocil:questionnaire:1"> |
| 2613 | ··········<ocil:title> | 2613 | ··········<ocil:title>Disable·Search·Suggestion</ocil:title> |
| 2614 | ··········<ocil:actions> | 2614 | ··········<ocil:actions> |
| Max diff block lines reached; 69180/81982 bytes (84.38%) of diff not shown. | |||
| Offset 3, 455 lines modified | Offset 3, 455 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_google_sync_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Disable·Data·Synchronization·to·Google</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_google_sync_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Disable· | 17 | ······<ocil:title>Disable·Background·Processing</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_encrypted_searching_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Enable·Encrypted·Searching</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_encrypted_searching_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_block_desktop_notifications_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Prevent·Desktop·Notifications</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_block_desktop_notifications_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Enable·the·Default·Search·Provider</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_protocol_schemas_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Disable· | 41 | ······<ocil:title>Disable·Insecure·And·Obsolete·Protocol·Schemas</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_protocol_schemas_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disa | 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_metrics_reporting_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable· | 47 | ······<ocil:title>Disable·Metrics·Reporting</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_disa | 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_metrics_reporting_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_p | 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_plugin_blacklist_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Disable·All·Plugins·by·Default</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_p | 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_plugin_blacklist_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_session_cookies_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Disable· | 59 | ······<ocil:title>Disable·Session·Cookies</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_session_cookies_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_browser_history_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Enable·Saving·the·Browser·History</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_browser_history_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_http_authentication_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Set·Chromium's·HTTP·Authentication·Scheme</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_http_authentication_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_search_suggestions_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Disable·Search·Suggestion</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_search_suggestions_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_plugins_require_authorization_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Require·Outdated·Plugins·to·be·Authorized</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_plugins_require_authorization_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_autocomplete_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Disable·the·AutoFill·Feature</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_autocomplete_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_thirdparty_cookies_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Disable· | 95 | ······<ocil:title>Disable·3rd·Party·Cookies</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_thirdparty_cookies_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_approved_plugins_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Enable·Only·Approved·Plugins</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_approved_plugins_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Enable·Plugins·for·Only·Approved·URLs</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_whitelist_plugin_urls_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_saved_passwords_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Disable· | 113 | ······<ocil:title>Disable·Saved·Passwords</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_saved_passwords_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 118 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_safe_browsing_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Enable·the·Safe·Browsing·Feature</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 121 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_safe_browsing_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 124 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_network_prediction_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 125 | ······<ocil:title>Disable·Network·Prediction</ocil:title> |
| 126 | ······<ocil:actions> | 126 | ······<ocil:actions> |
| 127 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 127 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_network_prediction_action:testaction:1</ocil:test_action_ref> |
| 128 | ······</ocil:actions> | 128 | ······</ocil:actions> |
| 129 | ····</ocil:questionnaire> | 129 | ····</ocil:questionnaire> |
| Max diff block lines reached; 59853/72985 bytes (82.01%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Chromium.·It·is·a·rendering·of | 7 | configuration·settings·for·Chromium.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> |
| Offset 35, 17 lines modified | Offset 35, 17 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2024-11-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="2024-11-0 | 44 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of | 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 50 | in·order·to·support·security·automation.··The·SCAP·content·is | 50 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 51 | is·available·in·the | 51 | is·available·in·the |
| Offset 113, 24 lines modified | Offset 113, 24 lines modified | ||
| 113 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 119 | ······<cpe-lang:platform-specification> | 119 | ······<cpe-lang:platform-specification> |
| 120 | ········<cpe-lang:platform·id="eks-node"> | ||
| 121 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 123 | ··········</cpe-lang:logical-test> | ||
| 124 | ········</cpe-lang:platform> | ||
| 125 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift"> | 120 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | 121 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 128 | ··········</cpe-lang:logical-test> | 123 | ··········</cpe-lang:logical-test> |
| 129 | ········</cpe-lang:platform> | 124 | ········</cpe-lang:platform> |
| 125 | ········<cpe-lang:platform·id="eks-node"> | ||
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 128 | ··········</cpe-lang:logical-test> | ||
| 129 | ········</cpe-lang:platform> | ||
| 130 | ······</cpe-lang:platform-specification> | 130 | ······</cpe-lang:platform-specification> |
| 131 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> | 131 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> |
| 132 | ······<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> | 132 | ······<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> |
| 133 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> | 133 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> |
| 134 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> | 134 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> |
| 135 | ······<xccdf-1.2:metadata> | 135 | ······<xccdf-1.2:metadata> |
| 136 | ········<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> | 136 | ········<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> |
| Offset 1490, 15 lines modified | Offset 1490, 15 lines modified | ||
| 1490 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> | 1490 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> |
| 1491 | ············</xccdf-1.2:check> | 1491 | ············</xccdf-1.2:check> |
| 1492 | ··········</xccdf-1.2:Rule> | 1492 | ··········</xccdf-1.2:Rule> |
| 1493 | ········</xccdf-1.2:Group> | 1493 | ········</xccdf-1.2:Group> |
| 1494 | ······</xccdf-1.2:Group> | 1494 | ······</xccdf-1.2:Group> |
| 1495 | ····</xccdf-1.2:Benchmark> | 1495 | ····</xccdf-1.2:Benchmark> |
| 1496 | ··</ds:component> | 1496 | ··</ds:component> |
| 1497 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2024-11-0 | 1497 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 1498 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1498 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1499 | ······<oval-def:generator> | 1499 | ······<oval-def:generator> |
| 1500 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1500 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1501 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 1501 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 1502 | ········<oval:schema_version>5.11</oval:schema_version> | 1502 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1503 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 1503 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 1504 | ······</oval-def:generator> | 1504 | ······</oval-def:generator> |
| Offset 2111, 519 lines modified | Offset 2111, 637 lines modified | ||
| 2111 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> | 2111 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> |
| 2112 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> | 2112 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> |
| 2113 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> | 2113 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> |
| 2114 | ········</oval-def:local_variable> | 2114 | ········</oval-def:local_variable> |
| 2115 | ······</oval-def:variables> | 2115 | ······</oval-def:variables> |
| 2116 | ····</oval-def:oval_definitions> | 2116 | ····</oval-def:oval_definitions> |
| 2117 | ··</ds:component> | 2117 | ··</ds:component> |
| 2118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2024-11-0 | 2118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 2119 | ····<ocil:ocil> | 2119 | ····<ocil:ocil> |
| 2120 | ······<ocil:generator> | 2120 | ······<ocil:generator> |
| 2121 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2121 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2122 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 2122 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 2123 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2123 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2124 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 2124 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 2125 | ······</ocil:generator> | 2125 | ······</ocil:generator> |
| 2126 | ······<ocil:questionnaires> | 2126 | ······<ocil:questionnaires> |
| 2127 | ········<ocil:questionnaire·id="ocil:ssg- | 2127 | ········<ocil:questionnaire·id="ocil:ssg-configure_tls_ocil:questionnaire:1"> |
| 2128 | ··········<ocil:title> | 2128 | ··········<ocil:title>Encrypt·Traffic·to·Load·Balancers·and·Workloads</ocil:title> |
| 2129 | ··········<ocil:actions> | 2129 | ··········<ocil:actions> |
| 2130 | ············<ocil:test_action_ref>ocil:ssg- | 2130 | ············<ocil:test_action_ref>ocil:ssg-configure_tls_action:testaction:1</ocil:test_action_ref> |
| 2131 | ··········</ocil:actions> | 2131 | ··········</ocil:actions> |
| 2132 | ········</ocil:questionnaire> | 2132 | ········</ocil:questionnaire> |
| 2133 | ········<ocil:questionnaire·id="ocil:ssg- | 2133 | ········<ocil:questionnaire·id="ocil:ssg-file_groupowner_kubelet_conf_ocil:questionnaire:1"> |
| 2134 | ··········<ocil:title> | 2134 | ··········<ocil:title>Verify·Group·Who·Owns·The·Kubelet·Configuration·File</ocil:title> |
| 2135 | ··········<ocil:actions> | 2135 | ··········<ocil:actions> |
| 2136 | ············<ocil:test_action_ref>ocil:ssg- | 2136 | ············<ocil:test_action_ref>ocil:ssg-file_groupowner_kubelet_conf_action:testaction:1</ocil:test_action_ref> |
| 2137 | ··········</ocil:actions> | 2137 | ··········</ocil:actions> |
| 2138 | ········</ocil:questionnaire> | 2138 | ········</ocil:questionnaire> |
| 2139 | ········<ocil:questionnaire·id="ocil:ssg-e | 2139 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_read_only_port_secured_ocil:questionnaire:1"> |
| 2140 | ··········<ocil:title>Ensure· | 2140 | ··········<ocil:title>kubelet·-·Ensure·that·the·--read-only-port·is·secured</ocil:title> |
| 2141 | ··········<ocil:actions> | 2141 | ··········<ocil:actions> |
| 2142 | ············<ocil:test_action_ref>ocil:ssg-e | 2142 | ············<ocil:test_action_ref>ocil:ssg-kubelet_read_only_port_secured_action:testaction:1</ocil:test_action_ref> |
| 2143 | ··········</ocil:actions> | 2143 | ··········</ocil:actions> |
| 2144 | ········</ocil:questionnaire> | 2144 | ········</ocil:questionnaire> |
| 2145 | ········<ocil:questionnaire·id="ocil:ssg- | 2145 | ········<ocil:questionnaire·id="ocil:ssg-read_only_registry_access_ocil:questionnaire:1"> |
| 2146 | ··········<ocil:title>Ensure· | 2146 | ··········<ocil:title>Ensure·Cluster·Service·Account·with·read-only·access·to·Amazon·ECR</ocil:title> |
| 2147 | ··········<ocil:actions> | 2147 | ··········<ocil:actions> |
| 2148 | ············<ocil:test_action_ref>ocil:ssg- | 2148 | ············<ocil:test_action_ref>ocil:ssg-read_only_registry_access_action:testaction:1</ocil:test_action_ref> |
| 2149 | ··········</ocil:actions> | 2149 | ··········</ocil:actions> |
| 2150 | ········</ocil:questionnaire> | 2150 | ········</ocil:questionnaire> |
| 2151 | ········<ocil:questionnaire·id="ocil:ssg- | 2151 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_server_cert_rotation_ocil:questionnaire:1"> |
| 2152 | ··········<ocil:title> | 2152 | ··········<ocil:title>kubelet·-·Enable·Server·Certificate·Rotation</ocil:title> |
| 2153 | ··········<ocil:actions> | 2153 | ··········<ocil:actions> |
| 2154 | ············<ocil:test_action_ref>ocil:ssg- | 2154 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_server_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 2155 | ··········</ocil:actions> | 2155 | ··········</ocil:actions> |
| 2156 | ········</ocil:questionnaire> | 2156 | ········</ocil:questionnaire> |
| 2157 | ········<ocil:questionnaire·id="ocil:ssg- | 2157 | ········<ocil:questionnaire·id="ocil:ssg-file_permissions_kubelet_conf_ocil:questionnaire:1"> |
| Max diff block lines reached; 85257/96733 bytes (88.14%) of diff not shown. | |||
| Offset 3, 510 lines modified | Offset 3, 628 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-configure_tls_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Encrypt·Traffic·to·Load·Balancers·and·Workloads</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-configure_tls_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_kubelet_conf_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Group·Who·Owns·The·Kubelet·Configuration·File</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_kubelet_conf_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-e | 22 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_read_only_port_secured_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure· | 23 | ······<ocil:title>kubelet·-·Ensure·that·the·--read-only-port·is·secured</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-e | 25 | ········<ocil:test_action_ref>ocil:ssg-kubelet_read_only_port_secured_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-read_only_registry_access_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Ensure· | 29 | ······<ocil:title>Ensure·Cluster·Service·Account·with·read-only·access·to·Amazon·ECR</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-read_only_registry_access_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_server_cert_rotation_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>kubelet·-·Enable·Server·Certificate·Rotation</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_server_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_kubelet_conf_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Verify·Permissions·on·The·Kubelet·Configuration·File</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_kubelet_conf_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-f | 46 | ····<ocil:questionnaire·id="ocil:ssg-endpoint_configuration_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Ensure·Private·Endpoint·Access</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-f | 49 | ········<ocil:test_action_ref>ocil:ssg-endpoint_configuration_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_kubelet_conf_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Verify·User·Who·Owns·The·Kubelet·Configuration·File</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_owner_kubelet_conf_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_protect_kernel_defaults_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>kubelet·-·En | 59 | ······<ocil:title>kubelet·-·Enable·Protect·Kernel·Defaults</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-kubelet_ | 61 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_protect_kernel_defaults_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_deprecated_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>kubelet·-· | 65 | ······<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_ | 67 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_deprecated_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_a | 70 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_cert_rotation_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>kubelet·-·Enable·Certificate·Rotation</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-kubelet_a | 73 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-control_plane_access_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Restrict·Access·to·the·Control·Plane·Endpoint</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-control_plane_access_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_authorization_mode_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·authorization·is·set·to·Webhook</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-kubelet_ | 85 | ········<ocil:test_action_ref>ocil:ssg-kubelet_authorization_mode_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-dedicated_service_accounts_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Use·Dedicated·Service·Accounts</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-dedicated_service_accounts_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_configure_client_ca_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>kubelet·-· | 95 | ······<ocil:title>kubelet·-·Configure·the·Client·CA·Certificate</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-kubelet_ | 97 | ········<ocil:test_action_ref>ocil:ssg-kubelet_configure_client_ca_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_logging_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Ensure·Audit·Logging·is·Enabled</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_logging_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-approved_registries_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Only·use·approved·container·registries</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-approved_registries_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-iam_integration_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Manage·Users·with·AWS·IAM</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-iam_integration_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policies_namespaces_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Ensure·that·application·Namespaces·have·Network·Policies·defined.</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-configure_network_policies_namespaces_action:testaction:1</ocil:test_action_ref> | ||
| 122 | ······</ocil:actions> | ||
| 123 | ····</ocil:questionnaire> | ||
| 124 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_client_cert_rotation_ocil:questionnaire:1"> | ||
| 125 | ······<ocil:title>kubelet·-·Enable·Client·Certificate·Rotation</ocil:title> | ||
| 126 | ······<ocil:actions> | ||
| 121 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_cert_rotation_action:testaction:1</ocil:test_action_ref> | 127 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_client_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 128 | ······</ocil:actions> |
| Max diff block lines reached; 72712/85274 bytes (85.27%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of | 7 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 24 lines modified | Offset 72, 24 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="eks-node"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> | 79 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="eks-node"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ··</cpe-lang:platform-specification> | 89 | ··</cpe-lang:platform-specification> |
| 90 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> | 90 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> |
| 91 | ··<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> | 91 | ··<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> |
| 92 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> | 92 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> |
| 93 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> | 93 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.74</xccdf-1.2:version> |
| 94 | ··<xccdf-1.2:metadata> | 94 | ··<xccdf-1.2:metadata> |
| 95 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> | 95 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> |
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2024-11-0 | 36 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of | 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 3479, 15 lines modified | Offset 3479, 15 lines modified | ||
| 3479 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> | 3479 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> |
| 3480 | ············</xccdf-1.2:check> | 3480 | ············</xccdf-1.2:check> |
| 3481 | ··········</xccdf-1.2:Rule> | 3481 | ··········</xccdf-1.2:Rule> |
| 3482 | ········</xccdf-1.2:Group> | 3482 | ········</xccdf-1.2:Group> |
| 3483 | ······</xccdf-1.2:Group> | 3483 | ······</xccdf-1.2:Group> |
| 3484 | ····</xccdf-1.2:Benchmark> | 3484 | ····</xccdf-1.2:Benchmark> |
| 3485 | ··</ds:component> | 3485 | ··</ds:component> |
| 3486 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2024-11-0 | 3486 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 3487 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 3487 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 3488 | ······<oval-def:generator> | 3488 | ······<oval-def:generator> |
| 3489 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 3489 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 3490 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 3490 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 3491 | ········<oval:schema_version>5.11</oval:schema_version> | 3491 | ········<oval:schema_version>5.11</oval:schema_version> |
| 3492 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 3492 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 3493 | ······</oval-def:generator> | 3493 | ······</oval-def:generator> |
| Offset 5189, 460 lines modified | Offset 5189, 457 lines modified | ||
| 5189 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> | 5189 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> |
| 5190 | ············</oval-def:concat> | 5190 | ············</oval-def:concat> |
| 5191 | ··········</oval-def:unique> | 5191 | ··········</oval-def:unique> |
| 5192 | ········</oval-def:local_variable> | 5192 | ········</oval-def:local_variable> |
| 5193 | ······</oval-def:variables> | 5193 | ······</oval-def:variables> |
| 5194 | ····</oval-def:oval_definitions> | 5194 | ····</oval-def:oval_definitions> |
| 5195 | ··</ds:component> | 5195 | ··</ds:component> |
| 5196 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2024-11-0 | 5196 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 5197 | ····<ocil:ocil> | 5197 | ····<ocil:ocil> |
| 5198 | ······<ocil:generator> | 5198 | ······<ocil:generator> |
| 5199 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 5199 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5200 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5200 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 5201 | ········<ocil:schema_version>2.0</ocil:schema_version> | 5201 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 5202 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 5202 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 5203 | ······</ocil:generator> | 5203 | ······</ocil:generator> |
| 5204 | ······<ocil:questionnaires> | 5204 | ······<ocil:questionnaires> |
| 5205 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5205 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> |
| 5206 | ··········<ocil:title> | 5206 | ··········<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> |
| 5207 | ··········<ocil:actions> | 5207 | ··········<ocil:actions> |
| 5208 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5208 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> |
| 5209 | ··········</ocil:actions> | 5209 | ··········</ocil:actions> |
| 5210 | ········</ocil:questionnaire> | 5210 | ········</ocil:questionnaire> |
| 5211 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5211 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"> |
| 5212 | ··········<ocil:title>En | 5212 | ··········<ocil:title>Enable·Shared·System·Certificates</ocil:title> |
| 5213 | ··········<ocil:actions> | 5213 | ··········<ocil:actions> |
| 5214 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5214 | ············<ocil:test_action_ref>ocil:ssg-firefox_preferences-enable_ca_trust_action:testaction:1</ocil:test_action_ref> |
| 5215 | ··········</ocil:actions> | 5215 | ··········</ocil:actions> |
| 5216 | ········</ocil:questionnaire> | 5216 | ········</ocil:questionnaire> |
| 5217 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5217 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> |
| 5218 | ··········<ocil:title> | 5218 | ··········<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> |
| 5219 | ··········<ocil:actions> | 5219 | ··········<ocil:actions> |
| 5220 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5220 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> |
| 5221 | ··········</ocil:actions> | 5221 | ··········</ocil:actions> |
| 5222 | ········</ocil:questionnaire> | 5222 | ········</ocil:questionnaire> |
| 5223 | ········<ocil:questionnaire·id="ocil:ssg- | 5223 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> |
| 5224 | ··········<ocil:title> | 5224 | ··········<ocil:title>Enable·Certificate·Verification</ocil:title> |
| 5225 | ··········<ocil:actions> | 5225 | ··········<ocil:actions> |
| 5226 | ············<ocil:test_action_ref>ocil:ssg- | 5226 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-verification_action:testaction:1</ocil:test_action_ref> |
| 5227 | ··········</ocil:actions> | 5227 | ··········</ocil:actions> |
| 5228 | ········</ocil:questionnaire> | 5228 | ········</ocil:questionnaire> |
| 5229 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5229 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> |
| 5230 | ··········<ocil:title> | 5230 | ··········<ocil:title>The·DoD·Root·Certificate·Exists</ocil:title> |
| 5231 | ··········<ocil:actions> | 5231 | ··········<ocil:actions> |
| 5232 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5232 | ············<ocil:test_action_ref>ocil:ssg-firefox_preferences-dod_root_certificate_installed_action:testaction:1</ocil:test_action_ref> |
| 5233 | ··········</ocil:actions> | 5233 | ··········</ocil:actions> |
| 5234 | ········</ocil:questionnaire> | 5234 | ········</ocil:questionnaire> |
| 5235 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5235 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> |
| 5236 | ··········<ocil:title> | 5236 | ··········<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> |
| 5237 | ··········<ocil:actions> | 5237 | ··········<ocil:actions> |
| 5238 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5238 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> |
| 5239 | ··········</ocil:actions> | 5239 | ··········</ocil:actions> |
| 5240 | ········</ocil:questionnaire> | 5240 | ········</ocil:questionnaire> |
| 5241 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5241 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> |
| 5242 | ··········<ocil:title>Enabled·Firefox· | 5242 | ··········<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> |
| 5243 | ··········<ocil:actions> | 5243 | ··········<ocil:actions> |
| 5244 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5244 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-cryptomining_action:testaction:1</ocil:test_action_ref> |
| 5245 | ··········</ocil:actions> | 5245 | ··········</ocil:actions> |
| 5246 | ········</ocil:questionnaire> | 5246 | ········</ocil:questionnaire> |
| 5247 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5247 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-network_prediction_ocil:questionnaire:1"> |
| 5248 | ··········<ocil:title>Disable·Firefox· | 5248 | ··········<ocil:title>Disable·Firefox·network·prediction</ocil:title> |
| 5249 | ··········<ocil:actions> | 5249 | ··········<ocil:actions> |
| 5250 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5250 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-network_prediction_action:testaction:1</ocil:test_action_ref> |
| 5251 | ··········</ocil:actions> | 5251 | ··········</ocil:actions> |
| 5252 | ········</ocil:questionnaire> | 5252 | ········</ocil:questionnaire> |
| 5253 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5253 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 5254 | ··········<ocil:title> | 5254 | ··········<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 5255 | ··········<ocil:actions> | 5255 | ··········<ocil:actions> |
| 5256 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5256 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> |
| 5257 | ··········</ocil:actions> | ||
| 5258 | ········</ocil:questionnaire> | ||
| 5259 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-fingerprinting_protection_ocil:questionnaire:1"> | ||
| 5260 | ··········<ocil:title>Enabled·Firefox·Fingerprinting·Protection</ocil:title> | ||
| 5261 | ··········<ocil:actions> | ||
| 5262 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-fingerprinting_protection_action:testaction:1</ocil:test_action_ref> | ||
| 5257 | ··········</ocil:actions> | 5263 | ··········</ocil:actions> |
| 5258 | ········</ocil:questionnaire> | 5264 | ········</ocil:questionnaire> |
| 5259 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> | 5265 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> |
| 5260 | ··········<ocil:title>Disable·auto-download·for·proscribed·MIME·types.</ocil:title> | 5266 | ··········<ocil:title>Disable·auto-download·for·proscribed·MIME·types.</ocil:title> |
| 5261 | ··········<ocil:actions> | 5267 | ··········<ocil:actions> |
| 5262 | ············<ocil:test_action_ref>ocil:ssg-firefox_preferences-auto-download_actions_action:testaction:1</ocil:test_action_ref> | 5268 | ············<ocil:test_action_ref>ocil:ssg-firefox_preferences-auto-download_actions_action:testaction:1</ocil:test_action_ref> |
| 5263 | ··········</ocil:actions> | 5269 | ··········</ocil:actions> |
| 5264 | ········</ocil:questionnaire> | 5270 | ········</ocil:questionnaire> |
| 5265 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> | ||
| 5266 | ········ | 5271 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_studies_ocil:questionnaire:1"> |
| 5272 | ··········<ocil:title>Disable·Firefox·Studies</ocil:title> | ||
| Max diff block lines reached; 46950/58669 bytes (80.03%) of diff not shown. | |||
| Offset 3, 451 lines modified | Offset 3, 448 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>En | 17 | ······<ocil:title>Enable·Shared·System·Certificates</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-enable_ca_trust_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Enable·Certificate·Verification</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-verification_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>The·DoD·Root·Certificate·Exists</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-dod_root_certificate_installed_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Enabled·Firefox· | 47 | ······<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-cryptomining_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-network_prediction_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Disable·Firefox· | 53 | ······<ocil:title>Disable·Firefox·network·prediction</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-network_prediction_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | ||
| 63 | ····</ocil:questionnaire> | ||
| 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-fingerprinting_protection_ocil:questionnaire:1"> | ||
| 65 | ······<ocil:title>Enabled·Firefox·Fingerprinting·Protection</ocil:title> | ||
| 66 | ······<ocil:actions> | ||
| 67 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-fingerprinting_protection_action:testaction:1</ocil:test_action_ref> | ||
| 62 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> | 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Disable·auto-download·for·proscribed·MIME·types.</ocil:title> | 71 | ······<ocil:title>Disable·auto-download·for·proscribed·MIME·types.</ocil:title> |
| 66 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-auto-download_actions_action:testaction:1</ocil:test_action_ref> | 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-auto-download_actions_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> | ||
| 71 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_studies_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Disable·Firefox·Studies</ocil:title> | ||
| 72 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_studies_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-pop-up_windows_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Enable· | 83 | ······<ocil:title>Enable·Firefox·Pop-up·Blocker</ocil:title> |
| 78 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-pop-up_windows_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-c | 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-enhanced_tracking_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Enabled·Firefox· | 89 | ······<ocil:title>Enabled·Firefox·Enhanced·Tracking·Protection</ocil:title> |
| 84 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-c | 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-enhanced_tracking_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_update_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable | 95 | ······<ocil:title>Disable·Installed·Search·Plugins·Update·Checking</ocil:title> |
| 90 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_update_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-development_tools_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 101 | ······<ocil:title>Disable·Firefox·Development·Tools</ocil:title> |
| 96 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-development_tools_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_update_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Firefox·autop | 107 | ······<ocil:title>Firefox·must·be·configured·to·not·automatically·update·installed·add-ons·and·plugins.</ocil:title> |
| 102 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_update_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_ | 112 | ····<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 113 | ······<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> |
| 108 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_ | 115 | ········<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-t | 118 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-autoplay_video_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 119 | ······<ocil:title>Firefox·autoplay·must·be·disabled.</ocil:title> |
| 114 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-t | 121 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-autoplay_video_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_pocket_ocil:questionnaire:1"> | 124 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_pocket_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Disable·Firefox·Pocket</ocil:title> | 125 | ······<ocil:title>Disable·Firefox·Pocket</ocil:title> |
| 120 | ······<ocil:actions> | 126 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_pocket_action:testaction:1</ocil:test_action_ref> | 127 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_pocket_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 128 | ······</ocil:actions> |
| Max diff block lines reached; 38911/51237 bytes (75.94%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Firefox.·It·is·a·rendering·of | 7 | configuration·settings·for·Firefox.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····27 | 2 | -rw-r--r--···0········0········0·····2740·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··280 | 3 | -rw-r--r--···0········0········0··2804492·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037d50:·3234·2d31·312d·303 | 00037d50:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 16004, 147 lines modified | Offset 16004, 147 lines modified | ||
| 0003e830:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003e830:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003e840:·743d·2223·6964·6d31·3735·3422·2074·6162··t="#idm1754"·tab | 0003e840:·743d·2223·6964·6d31·3735·3422·2074·6162··t="#idm1754"·tab | ||
| 0003e850:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003e850:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003e860:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003e860:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003e870:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003e870:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003e880:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003e880:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003e890:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003e890:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003e8a0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003e8b0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003e8c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003e8d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003e8e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003e8f0:·6964·6d31·3735·3422·3e3c·7461·626c·6520··idm1754"><table· | |||
| 0003e900:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003e910:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003e920:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003e930:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003e940:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003e950:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003e960:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003e970:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003e980:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003e990:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003e9a0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003e9b0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003e9c0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 0003e9d0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 0003e9e0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003e9f0:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 0003ea00:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 0003ea10:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 0003ea20:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 0003ea30:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 0003ea40:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 0003ea50:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 0003ea60:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 0003ea70:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 0003ea80:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 0003ea90:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 0003eaa0:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 0003eab0:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 0003eac0:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 0003ead0:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 0003eae0:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 0003eaf0:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 0003eb00:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 0003eb10:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 0003eb20:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 0003eb30:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 0003eb40:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 0003eb50:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 0003eb60:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 0003eb70:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 0003eb80:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 0003eb90:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 0003eba0:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 0003ebb0:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 0003ebc0:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 0003ebd0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ebe0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ebf0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ec00:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ec10:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ec20:·743d·2223·6964·6d31·3735·3522·2074·6162··t="#idm1755"·tab | |||
| 0003ec30:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003ec40:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ec50:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003ec60:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003ec70:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003e | 0003ec80:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003e | 0003ec90:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003e | 0003eca0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003e | 0003ecb0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003e | 0003ecc0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003e8f0:·643d·2269·646d·3137·3534·223e·3c74·6162··d="idm1754"><tab | |||
| 0003e900:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003e910:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003e920:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003e930:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003e940:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003e950:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e960:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003e970:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003e980:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003e990:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003e9a0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003e9b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003e9c0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003e9d0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003e9e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003e9f0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 0003ea00:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 0003ea10:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 0003ea20:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 0003ea30:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 0003ea40:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 0003ea50:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 0003ea60:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 0003ea70:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003ea80:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 0003ea90:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 0003eaa0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003eab0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003eac0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003ead0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003eae0:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 0003eaf0:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 0003eb00:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 0003eb10:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 0003eb20:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 0003eb30:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| Max diff block lines reached; 909874/929938 bytes (97.84%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 227, 14 lines modified | Offset 227, 35 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Find·/etc/sudoers.d/·files | 258 | -·name:·Find·/etc/sudoers.d/·files |
| 240 | ··ansible.builtin.find: | 259 | ··ansible.builtin.find: |
| Offset 265, 35 lines modified | Offset 286, 14 lines modified | ||
| 265 | ··-·NIST-800-53-IA-11 | 286 | ··-·NIST-800-53-IA-11 |
| 266 | ··-·low_complexity | 287 | ··-·low_complexity |
| 267 | ··-·low_disruption | 288 | ··-·low_disruption |
| 268 | ··-·medium_severity | 289 | ··-·medium_severity |
| 269 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 270 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 271 | ··-·sudo_remove_no_authenticate | 292 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 297 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 14 lines modified | Offset 314, 35 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Find·/etc/sudoers.d/·files | 345 | -·name:·Find·/etc/sudoers.d/·files |
| 327 | ··ansible.builtin.find: | 346 | ··ansible.builtin.find: |
| Offset 352, 35 lines modified | Offset 373, 14 lines modified | ||
| 352 | ··-·NIST-800-53-IA-11 | 373 | ··-·NIST-800-53-IA-11 |
| 353 | ··-·low_complexity | 374 | ··-·low_complexity |
| 354 | ··-·low_disruption | 375 | ··-·low_disruption |
| Max diff block lines reached; 109956/115705 bytes (95.03%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d60:·206f·6620·3230·3234·2d31·312d·303 | 00037d60:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16025, 146 lines modified | Offset 16025, 146 lines modified | ||
| 0003e980:·6172·6765·743d·2223·6964·6d31·3735·3422··arget="#idm1754" | 0003e980:·6172·6765·743d·2223·6964·6d31·3735·3422··arget="#idm1754" | ||
| 0003e990:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003e990:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003e9a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003e9a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003e9b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003e9b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003e9c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003e9c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003e9d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003e9d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003e9e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003e9e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003e9f0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003ea00:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ea10:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ea20:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ea30:·6964·3d22·6964·6d31·3735·3422·3e3c·7461··id="idm1754"><ta | |||
| 0003ea40:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ea50:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003ea60:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003ea70:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003ea80:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003ea90:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003eaa0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003eab0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003eac0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ead0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003eae0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003eaf0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003eb00:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003eb10:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003eb20:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003eb30:·3e3c·636f·6465·3e0a·666f·7220·6620·696e··><code>.for·f·in | |||
| 0003eb40:·202f·6574·632f·7375·646f·6572·7320·2f65···/etc/sudoers·/e | |||
| 0003eb50:·7463·2f73·7564·6f65·7273·2e64·2f2a·203b··tc/sudoers.d/*·; | |||
| 0003eb60:·2064·6f0a·2020·6966·205b·2021·202d·6520···do.··if·[·!·-e· | |||
| 0003eb70:·2224·6622·205d·203b·2074·6865·6e0a·2020··"$f"·]·;·then.·· | |||
| 0003eb80:·2020·636f·6e74·696e·7565·0a20·2066·690a····continue.··fi. | |||
| 0003eb90:·2020·6d61·7463·6869·6e67·5f6c·6973·743d····matching_list= | |||
| 0003eba0:·2428·6772·6570·202d·5020·275e·283f·2123··$(grep·-P·'^(?!# | |||
| 0003ebb0:·292e·2a5b·5c73·5d2b·5c21·6175·7468·656e··).*[\s]+\!authen | |||
| 0003ebc0:·7469·6361·7465·2e2a·2427·2024·6620·7c20··ticate.*$'·$f·|· | |||
| 0003ebd0:·756e·6971·2029·0a20·2069·6620·2120·7465··uniq·).··if·!·te | |||
| 0003ebe0:·7374·202d·7a20·2224·6d61·7463·6869·6e67··st·-z·"$matching | |||
| 0003ebf0:·5f6c·6973·7422·3b20·7468·656e·0a20·2020··_list";·then.··· | |||
| 0003ec00:·2077·6869·6c65·2049·4653·3d20·7265·6164···while·IFS=·read | |||
| 0003ec10:·202d·7220·656e·7472·793b·2064·6f0a·2020···-r·entry;·do.·· | |||
| 0003ec20:·2020·2020·2320·636f·6d6d·656e·7420·6f75······#·comment·ou | |||
| 0003ec30:·7420·2221·6175·7468·656e·7469·6361·7465··t·"!authenticate | |||
| 0003ec40:·2220·6d61·7463·6865·7320·746f·2070·7265··"·matches·to·pre | |||
| 0003ec50:·7365·7276·6520·7573·6572·2064·6174·610a··serve·user·data. | |||
| 0003ec60:·2020·2020·2020·7365·6420·2d69·2022·732f········sed·-i·"s/ | |||
| 0003ec70:·5e24·7b65·6e74·7279·7d24·2f23·2026·616d··^${entry}$/#·&am | |||
| 0003ec80:·703b·2f67·2220·2466·0a20·2020·2064·6f6e··p;/g"·$f.····don | |||
| 0003ec90:·6520·266c·743b·266c·743b·266c·743b·2022··e·<<<·" | |||
| 0003eca0:·246d·6174·6368·696e·675f·6c69·7374·220a··$matching_list". | |||
| 0003ecb0:·0a20·2020·202f·7573·722f·7362·696e·2f76··.····/usr/sbin/v | |||
| 0003ecc0:·6973·7564·6f20·2d63·6620·2466·2026·616d··isudo·-cf·$f·&am | |||
| 0003ecd0:·703b·2667·743b·202f·6465·762f·6e75·6c6c··p;>·/dev/null | |||
| 0003ece0:·207c·7c20·6563·686f·2022·4661·696c·2074···||·echo·"Fail·t | |||
| 0003ecf0:·6f20·7661·6c69·6461·7465·2024·6620·7769··o·validate·$f·wi | |||
| 0003ed00:·7468·2076·6973·7564·6f22·0a20·2066·690a··th·visudo".··fi. | |||
| 0003ed10:·646f·6e65·0a3c·2f63·6f64·653e·3c2f·7072··done.</code></pr | |||
| 0003ed20:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ed30:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003ed40:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003ed50:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003ed60:·6172·6765·743d·2223·6964·6d31·3735·3522··arget="#idm1755" | |||
| 0003ed70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003ed80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003ed90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003eda0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003edb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003edc0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003e | 0003edd0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003e | 0003ede0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003ea10:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ea20:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ea30:·6522·2069·643d·2269·646d·3137·3534·223e··e"·id="idm1754"> | |||
| 0003ea40:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ea50:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ea60:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ea70:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ea80:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ea90:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003eaa0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003eab0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003eac0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ead0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003eae0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003eaf0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003eb00:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003eb10:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003eb20:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003eb30:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003eb40:·3a20·4669·6e64·202f·6574·632f·7375·646f··:·Find·/etc/sudo | |||
| 0003eb50:·6572·732e·642f·2066·696c·6573·0a20·2061··ers.d/·files.··a | |||
| 0003eb60:·6e73·6962·6c65·2e62·7569·6c74·696e·2e66··nsible.builtin.f | |||
| 0003eb70:·696e·643a·0a20·2020·2070·6174·6873·3a0a··ind:.····paths:. | |||
| 0003eb80:·2020·2020·2d20·2f65·7463·2f73·7564·6f65······-·/etc/sudoe | |||
| 0003eb90:·7273·2e64·2f0a·2020·7265·6769·7374·6572··rs.d/.··register | |||
| 0003eba0:·3a20·7375·646f·6572·730a·2020·7461·6773··:·sudoers.··tags | |||
| 0003ebb0:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 0003ebc0:·332d·434d·2d36·2861·290a·2020·2d20·4e49··3-CM-6(a).··-·NI | |||
| 0003ebd0:·5354·2d38·3030·2d35·332d·4941·2d31·310a··ST-800-53-IA-11. | |||
| 0003ebe0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003ebf0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003ec00:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003ec10:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003ec20:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003ec30:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003ec40:·7465·6779·0a20·202d·2073·7564·6f5f·7265··tegy.··-·sudo_re | |||
| 0003ec50:·6d6f·7665·5f6e·6f5f·6175·7468·656e·7469··move_no_authenti | |||
| 0003ec60:·6361·7465·0a0a·2d20·6e61·6d65·3a20·5265··cate..-·name:·Re | |||
| 0003ec70:·6d6f·7665·206c·696e·6573·2063·6f6e·7461··move·lines·conta | |||
| 0003ec80:·696e·696e·6720·2161·7574·6865·6e74·6963··ining·!authentic | |||
| Max diff block lines reached; 1064809/1084735 bytes (98.16%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 231, 14 lines modified | Offset 231, 35 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 243 | -·name:·Find·/etc/sudoers.d/·files | 262 | -·name:·Find·/etc/sudoers.d/·files |
| 244 | ··ansible.builtin.find: | 263 | ··ansible.builtin.find: |
| Offset 269, 35 lines modified | Offset 290, 14 lines modified | ||
| 269 | ··-·NIST-800-53-IA-11 | 290 | ··-·NIST-800-53-IA-11 |
| 270 | ··-·low_complexity | 291 | ··-·low_complexity |
| 271 | ··-·low_disruption | 292 | ··-·low_disruption |
| 272 | ··-·medium_severity | 293 | ··-·medium_severity |
| 273 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 275 | ··-·sudo_remove_no_authenticate | 296 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 303 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 14 lines modified | Offset 318, 35 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Find·/etc/sudoers.d/·files | 349 | -·name:·Find·/etc/sudoers.d/·files |
| 331 | ··ansible.builtin.find: | 350 | ··ansible.builtin.find: |
| Offset 356, 35 lines modified | Offset 377, 14 lines modified | ||
| 356 | ··-·NIST-800-53-IA-11 | 377 | ··-·NIST-800-53-IA-11 |
| 357 | ··-·low_complexity | 378 | ··-·low_complexity |
| 358 | ··-·low_disruption | 379 | ··-·low_disruption |
| Max diff block lines reached; 130831/136585 bytes (95.79%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·3234·2d31·312d·303 | 00037cf0:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 14774, 147 lines modified | Offset 14774, 147 lines modified | ||
| 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00039b60:·743d·2223·6964·6d31·3735·3422·2074·6162··t="#idm1754"·tab | 00039b60:·743d·2223·6964·6d31·3735·3422·2074·6162··t="#idm1754"·tab | ||
| 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00039bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00039bd0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00039be0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00039bf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00039c00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00039c10:·6964·6d31·3735·3422·3e3c·7461·626c·6520··idm1754"><table· | |||
| 00039c20:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039c30:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039c40:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039c50:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039c60:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039c70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039c80:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039c90:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039ca0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039cb0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039cc0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039cd0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039ce0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 00039cf0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 00039d00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00039d10:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 00039d20:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 00039d30:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 00039d40:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 00039d50:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 00039d60:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 00039d70:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 00039d80:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 00039d90:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 00039da0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 00039db0:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 00039dc0:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 00039dd0:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 00039de0:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 00039df0:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 00039e00:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 00039e10:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 00039e20:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 00039e30:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 00039e40:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 00039e50:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 00039e60:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 00039e70:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 00039e80:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 00039e90:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 00039ea0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 00039eb0:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 00039ec0:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 00039ed0:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 00039ee0:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 00039ef0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039f00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039f10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039f20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039f30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00039f40:·743d·2223·6964·6d31·3735·3522·2074·6162··t="#idm1755"·tab | |||
| 00039f50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039f60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039f70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039f80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039f90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039 | 00039fa0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00039 | 00039fb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 00039 | 00039fc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00039 | 00039fd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00039 | 00039fe0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00039c10:·643d·2269·646d·3137·3534·223e·3c74·6162··d="idm1754"><tab | |||
| 00039c20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00039c30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00039c40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00039c50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00039c60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00039c70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039c80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00039c90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00039ca0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039cb0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00039cc0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00039cd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00039ce0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00039cf0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 00039d00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00039d10:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 00039d20:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 00039d30:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 00039d40:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 00039d50:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 00039d60:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 00039d70:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 00039d80:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 00039d90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 00039da0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 00039dc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 00039dd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 00039de0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 00039df0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 00039e00:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 00039e10:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 00039e20:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 00039e30:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 00039e40:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 00039e50:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| Max diff block lines reached; 271922/291986 bytes (93.13%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 40 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 90, 14 lines modified | Offset 90, 35 lines modified | ||
| 90 | ···························1.7,·SR·1.8,·SR·1.9 | 90 | ···························1.7,·SR·1.8,·SR·1.9 |
| 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 96 | ···························SRG-OS-000373-GPOS-00158 | 96 | ···························SRG-OS-000373-GPOS-00158 |
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 102 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 103 | ··if·[·!·-e·"$f"·]·;·then | ||
| 104 | ····continue | ||
| 105 | ··fi | ||
| 106 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 107 | ··if·!·test·-z·"$matching_list";·then | ||
| 108 | ····while·IFS=·read·-r·entry;·do | ||
| 109 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 110 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 111 | ····done·<<<·"$matching_list" | ||
| 112 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 113 | visudo" | ||
| 114 | ··fi | ||
| 115 | done | ||
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 102 | -·name:·Find·/etc/sudoers.d/·files | 121 | -·name:·Find·/etc/sudoers.d/·files |
| 103 | ··ansible.builtin.find: | 122 | ··ansible.builtin.find: |
| Offset 128, 35 lines modified | Offset 149, 14 lines modified | ||
| 128 | ··-·NIST-800-53-IA-11 | 149 | ··-·NIST-800-53-IA-11 |
| 129 | ··-·low_complexity | 150 | ··-·low_complexity |
| 130 | ··-·low_disruption | 151 | ··-·low_disruption |
| 131 | ··-·medium_severity | 152 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 133 | ··-·restrict_strategy | 154 | ··-·restrict_strategy |
| 134 | ··-·sudo_remove_no_authenticate | 155 | ··-·sudo_remove_no_authenticate |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 140 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 141 | ··if·[·!·-e·"$f"·]·;·then | ||
| 142 | ····continue | ||
| 143 | ··fi | ||
| 144 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 145 | ··if·!·test·-z·"$matching_list";·then | ||
| 146 | ····while·IFS=·read·-r·entry;·do | ||
| 147 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 148 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 149 | ····done·<<<·"$matching_list" | ||
| 150 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 151 | visudo" | ||
| 152 | ··fi | ||
| 153 | done | ||
| 154 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 155 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 157 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 156 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 158 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 157 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 159 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 158 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 160 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 159 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 161 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 160 | ············Without·re-authentication,·users·may·access·resources·or·perform | 162 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 177, 14 lines modified | Offset 177, 35 lines modified | ||
| 177 | ···························1.7,·SR·1.8,·SR·1.9 | 177 | ···························1.7,·SR·1.8,·SR·1.9 |
| 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 183 | ···························SRG-OS-000373-GPOS-00158 | 183 | ···························SRG-OS-000373-GPOS-00158 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 189 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 190 | ··if·[·!·-e·"$f"·]·;·then | ||
| 191 | ····continue | ||
| 192 | ··fi | ||
| 193 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 194 | ··if·!·test·-z·"$matching_list";·then | ||
| 195 | ····while·IFS=·read·-r·entry;·do | ||
| 196 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 197 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 198 | ····done·<<<·"$matching_list" | ||
| 199 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 200 | visudo" | ||
| 201 | ··fi | ||
| 202 | done | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 189 | -·name:·Find·/etc/sudoers.d/·files | 208 | -·name:·Find·/etc/sudoers.d/·files |
| 190 | ··ansible.builtin.find: | 209 | ··ansible.builtin.find: |
| Offset 215, 35 lines modified | Offset 236, 14 lines modified | ||
| 215 | ··-·NIST-800-53-IA-11 | 236 | ··-·NIST-800-53-IA-11 |
| 216 | ··-·low_complexity | 237 | ··-·low_complexity |
| 217 | ··-·low_disruption | 238 | ··-·low_disruption |
| Max diff block lines reached; 34545/40286 bytes (85.75%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d30:·6173·206f·6620·3230·3234·2d31·312d·303 | 00037d30:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 16015, 146 lines modified | Offset 16015, 146 lines modified | ||
| 0003e8e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003e8e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003e8f0:·6964·6d31·3735·3422·2074·6162·696e·6465··idm1754"·tabinde | 0003e8f0:·6964·6d31·3735·3422·2074·6162·696e·6465··idm1754"·tabinde | ||
| 0003e900:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003e900:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003e910:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003e910:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003e920:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003e920:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003e930:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003e930:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003e940:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003e940:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003e950:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003e960:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003e970:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003e980:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003e990:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003e9a0:·3735·3422·3e3c·7461·626c·6520·636c·6173··754"><table·clas | |||
| 0003e9b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003e9c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003e9d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003e9e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003e9f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ea00:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ea10:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003ea20:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003ea30:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ea40:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003ea50:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003ea60:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003ea70:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | |||
| 0003ea80:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | |||
| 0003ea90:·626c·653e·3c70·7265·3e3c·636f·6465·3e0a··ble><pre><code>. | |||
| 0003eaa0:·666f·7220·6620·696e·202f·6574·632f·7375··for·f·in·/etc/su | |||
| 0003eab0:·646f·6572·7320·2f65·7463·2f73·7564·6f65··doers·/etc/sudoe | |||
| 0003eac0:·7273·2e64·2f2a·203b·2064·6f0a·2020·6966··rs.d/*·;·do.··if | |||
| 0003ead0:·205b·2021·202d·6520·2224·6622·205d·203b···[·!·-e·"$f"·]·; | |||
| 0003eae0:·2074·6865·6e0a·2020·2020·636f·6e74·696e···then.····contin | |||
| 0003eaf0:·7565·0a20·2066·690a·2020·6d61·7463·6869··ue.··fi.··matchi | |||
| 0003eb00:·6e67·5f6c·6973·743d·2428·6772·6570·202d··ng_list=$(grep·- | |||
| 0003eb10:·5020·275e·283f·2123·292e·2a5b·5c73·5d2b··P·'^(?!#).*[\s]+ | |||
| 0003eb20:·5c21·6175·7468·656e·7469·6361·7465·2e2a··\!authenticate.* | |||
| 0003eb30:·2427·2024·6620·7c20·756e·6971·2029·0a20··$'·$f·|·uniq·).· | |||
| 0003eb40:·2069·6620·2120·7465·7374·202d·7a20·2224···if·!·test·-z·"$ | |||
| 0003eb50:·6d61·7463·6869·6e67·5f6c·6973·7422·3b20··matching_list";· | |||
| 0003eb60:·7468·656e·0a20·2020·2077·6869·6c65·2049··then.····while·I | |||
| 0003eb70:·4653·3d20·7265·6164·202d·7220·656e·7472··FS=·read·-r·entr | |||
| 0003eb80:·793b·2064·6f0a·2020·2020·2020·2320·636f··y;·do.······#·co | |||
| 0003eb90:·6d6d·656e·7420·6f75·7420·2221·6175·7468··mment·out·"!auth | |||
| 0003eba0:·656e·7469·6361·7465·2220·6d61·7463·6865··enticate"·matche | |||
| 0003ebb0:·7320·746f·2070·7265·7365·7276·6520·7573··s·to·preserve·us | |||
| 0003ebc0:·6572·2064·6174·610a·2020·2020·2020·7365··er·data.······se | |||
| 0003ebd0:·6420·2d69·2022·732f·5e24·7b65·6e74·7279··d·-i·"s/^${entry | |||
| 0003ebe0:·7d24·2f23·2026·616d·703b·2f67·2220·2466··}$/#·&/g"·$f | |||
| 0003ebf0:·0a20·2020·2064·6f6e·6520·266c·743b·266c··.····done·<&l | |||
| 0003ec00:·743b·266c·743b·2022·246d·6174·6368·696e··t;<·"$matchin | |||
| 0003ec10:·675f·6c69·7374·220a·0a20·2020·202f·7573··g_list"..····/us | |||
| 0003ec20:·722f·7362·696e·2f76·6973·7564·6f20·2d63··r/sbin/visudo·-c | |||
| 0003ec30:·6620·2466·2026·616d·703b·2667·743b·202f··f·$f·&>·/ | |||
| 0003ec40:·6465·762f·6e75·6c6c·207c·7c20·6563·686f··dev/null·||·echo | |||
| 0003ec50:·2022·4661·696c·2074·6f20·7661·6c69·6461···"Fail·to·valida | |||
| 0003ec60:·7465·2024·6620·7769·7468·2076·6973·7564··te·$f·with·visud | |||
| 0003ec70:·6f22·0a20·2066·690a·646f·6e65·0a3c·2f63··o".··fi.done.</c | |||
| 0003ec80:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ec90:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003eca0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ecb0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ecc0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ecd0:·6964·6d31·3735·3522·2074·6162·696e·6465··idm1755"·tabinde | |||
| 0003ece0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003ecf0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003ed00:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003ed10:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003ed20:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003e | 0003ed30:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003e | 0003ed40:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003e | 0003ed50:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003e | 0003ed60:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003e | 0003ed70:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003e | 0003ed80:·646d·3137·3535·223e·3c74·6162·6c65·2063··dm1755"><table·c | ||
| 0003e | 0003ed90:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003e9c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003e9d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003e9e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003e9f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ea00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ea10:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ea20:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003ea30:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ea40:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003ea50:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003ea60:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003ea70:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 0003ea80:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 0003ea90:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003eaa0:·653e·2d20·6e61·6d65·3a20·4669·6e64·202f··e>-·name:·Find·/ | |||
| 0003eab0:·6574·632f·7375·646f·6572·732e·642f·2066··etc/sudoers.d/·f | |||
| 0003eac0:·696c·6573·0a20·2061·6e73·6962·6c65·2e62··iles.··ansible.b | |||
| 0003ead0:·7569·6c74·696e·2e66·696e·643a·0a20·2020··uiltin.find:.··· | |||
| 0003eae0:·2070·6174·6873·3a0a·2020·2020·2d20·2f65···paths:.····-·/e | |||
| 0003eaf0:·7463·2f73·7564·6f65·7273·2e64·2f0a·2020··tc/sudoers.d/.·· | |||
| 0003eb00:·7265·6769·7374·6572·3a20·7375·646f·6572··register:·sudoer | |||
| 0003eb10:·730a·2020·7461·6773·3a0a·2020·2d20·4e49··s.··tags:.··-·NI | |||
| 0003eb20:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003eb30:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003eb40:·332d·4941·2d31·310a·2020·2d20·6c6f·775f··3-IA-11.··-·low_ | |||
| 0003eb50:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003eb60:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003eb70:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003eb80:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003eb90:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | |||
| 0003eba0:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | |||
| 0003ebb0:·2073·7564·6f5f·7265·6d6f·7665·5f6e·6f5f···sudo_remove_no_ | |||
| 0003ebc0:·6175·7468·656e·7469·6361·7465·0a0a·2d20··authenticate..-· | |||
| 0003ebd0:·6e61·6d65·3a20·5265·6d6f·7665·206c·696e··name:·Remove·lin | |||
| 0003ebe0:·6573·2063·6f6e·7461·696e·696e·6720·2161··es·containing·!a | |||
| Max diff block lines reached; 1050498/1070424 bytes (98.14%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 229, 14 lines modified | Offset 229, 35 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Find·/etc/sudoers.d/·files | 260 | -·name:·Find·/etc/sudoers.d/·files |
| 242 | ··ansible.builtin.find: | 261 | ··ansible.builtin.find: |
| Offset 267, 35 lines modified | Offset 288, 14 lines modified | ||
| 267 | ··-·NIST-800-53-IA-11 | 288 | ··-·NIST-800-53-IA-11 |
| 268 | ··-·low_complexity | 289 | ··-·low_complexity |
| 269 | ··-·low_disruption | 290 | ··-·low_disruption |
| 270 | ··-·medium_severity | 291 | ··-·medium_severity |
| 271 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 273 | ··-·sudo_remove_no_authenticate | 294 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 14 lines modified | Offset 316, 35 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 328 | -·name:·Find·/etc/sudoers.d/·files | 347 | -·name:·Find·/etc/sudoers.d/·files |
| 329 | ··ansible.builtin.find: | 348 | ··ansible.builtin.find: |
| Offset 354, 35 lines modified | Offset 375, 14 lines modified | ||
| 354 | ··-·NIST-800-53-IA-11 | 375 | ··-·NIST-800-53-IA-11 |
| 355 | ··-·low_complexity | 376 | ··-·low_complexity |
| 356 | ··-·low_disruption | 377 | ··-·low_disruption |
| Max diff block lines reached; 128942/134684 bytes (95.74%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·342d·3131·2d30·3 | 00037d60:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16224, 741 lines modified | Offset 16224, 741 lines modified | ||
| 0003f5f0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003f5f0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003f600:·3d22·2369·646d·3439·3439·2220·7461·6269··="#idm4949"·tabi | 0003f600:·3d22·2369·646d·3439·3439·2220·7461·6269··="#idm4949"·tabi | ||
| 0003f610:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003f610:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003f620:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003f620:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003f630:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003f630:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003f640:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003f640:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | Diff chunk too large, falling back to line-by-line diff (727 lines added, 727 lines removed) | |
| 0003f650:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003f650:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003f660:·223e·5265·6d65·6469·6174·696f·6e20· | 0003f660:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003f670:· | 0003f670:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003f680:· | 0003f680:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003f690:· | 0003f690:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003f6a0:· | 0003f6a0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003f6b0:· | 0003f6b0:·646d·3439·3439·223e·3c70·7265·3e3c·636f··dm4949"><pre><co | ||
| 0003f6c0:·6 | 0003f6c0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 0003f6d0:· | 0003f6d0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 0003f6e0:·6 | 0003f6e0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 0003f6f0:·6 | 0003f6f0:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | ||
| 0003f700:· | 0003f700:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | ||
| 0003f710:· | 0003f710:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | ||
| 0003f720:· | 0003f720:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | ||
| 0003f730:· | 0003f730:·6572·656e·7620·5d3b·2074·6865·6e0a·0a23··erenv·];·then..# | ||
| 0003f740:· | 0003f740:·204c·6973·7420·6f66·206c·6f67·2066·696c···List·of·log·fil | ||
| 0003f750:· | 0003f750:·6520·7061·7468·7320·746f·2062·6520·696e··e·paths·to·be·in | ||
| 0003f760:· | 0003f760:·7370·6563·7465·6420·666f·7220·636f·7272··spected·for·corr | ||
| 0003f770:· | 0003f770:·6563·7420·7065·726d·6973·7369·6f6e·730a··ect·permissions. | ||
| 0003f780:· | 0003f780:·2320·2a20·5072·696d·6172·696c·7920·696e··#·*·Primarily·in | ||
| 0003f790:·7 | 0003f790:·7370·6563·7420·6c6f·6720·6669·6c65·2070··spect·log·file·p | ||
| 0003f7a0:· | 0003f7a0:·6174·6873·206c·6973·7465·6420·696e·202f··aths·listed·in·/ | ||
| 0003f7b0:· | 0003f7b0:·6574·632f·7273·7973·6c6f·672e·636f·6e66··etc/rsyslog.conf | ||
| 0003f7c0:· | 0003f7c0:·0a52·5359·534c·4f47·5f45·5443·5f43·4f4e··.RSYSLOG_ETC_CON | ||
| 0003f7d0:· | 0003f7d0:·4649·473d·222f·6574·632f·7273·7973·6c6f··FIG="/etc/rsyslo | ||
| 0003f7e0:· | 0003f7e0:·672e·636f·6e66·220a·2320·2a20·416e·6420··g.conf".#·*·And· | ||
| 0003f7f0:· | 0003f7f0:·616c·736f·2074·6865·206c·6f67·2066·696c··also·the·log·fil | ||
| 0003f800:·6 | 0003f800:·6520·7061·7468·7320·6c69·7374·6564·2061··e·paths·listed·a | ||
| 0003f810:· | 0003f810:·6674·6572·2072·7379·736c·6f67·2773·2024··fter·rsyslog's·$ | ||
| 0003f820:· | 0003f820:·496e·636c·7564·6543·6f6e·6669·6720·6469··IncludeConfig·di | ||
| 0003f830:· | 0003f830:·7265·6374·6976·650a·2320·2020·2873·746f··rective.#···(sto | ||
| 0003f840:·7 | 0003f840:·7265·2074·6865·2072·6573·756c·7420·696e··re·the·result·in | ||
| 0003f850:· | 0003f850:·746f·2061·7272·6179·2066·6f72·2074·6865··to·array·for·the | ||
| 0003f860:· | 0003f860:·2063·6173·6520·7468·6572·6527·7320·7368···case·there's·sh | ||
| 0003f870:·6 | 0003f870:·656c·6c20·676c·6f62·2075·7365·6420·6173··ell·glob·used·as | ||
| 0003f880:· | 0003f880:·2076·616c·7565·206f·6620·496e·636c·7564···value·of·Includ | ||
| 0003f890:· | 0003f890:·6543·6f6e·6669·6729·0a72·6561·6461·7272··eConfig).readarr | ||
| 0003f8a0:· | 0003f8a0:·6179·202d·7420·4f4c·445f·494e·4320·266c··ay·-t·OLD_INC·&l | ||
| 0003f8b0:· | 0003f8b0:·743b·2026·6c74·3b28·6772·6570·202d·6520··t;·<(grep·-e· | ||
| 0003f8c0:·225 | 0003f8c0:·225c·2449·6e63·6c75·6465·436f·6e66·6967··"\$IncludeConfig | ||
| 0003f8d0:· | 0003f8d0:·5b5b·3a73·7061·6365·3a5d·5d5c·2b5b·5e5b··[[:space:]]\+[^[ | ||
| 0003f8e0:·3 | 0003f8e0:·3a73·7061·6365·3a5d·3b5d·5c2b·2220·2f65··:space:];]\+"·/e | ||
| 0003f8f0:· | 0003f8f0:·7463·2f72·7379·736c·6f67·2e63·6f6e·6620··tc/rsyslog.conf· | ||
| 0003f900:· | 0003f900:·7c20·6375·7420·2d64·2027·2027·202d·6620··|·cut·-d·'·'·-f· | ||
| 0003f910:·3 | 0003f910:·3229·0a72·6561·6461·7272·6179·202d·7420··2).readarray·-t· | ||
| 0003f920:· | 0003f920:·5253·5953·4c4f·475f·494e·434c·5544·455f··RSYSLOG_INCLUDE_ | ||
| 0003f930:· | 0003f930:·434f·4e46·4947·2026·6c74·3b20·266c·743b··CONFIG·<·< | ||
| 0003f940:·2 | 0003f940:·2866·6f72·2049·4e43·5041·5448·2069·6e20··(for·INCPATH·in· | ||
| 0003f950:· | 0003f950:·2224·7b4f·4c44·5f49·4e43·5b40·5d7d·223b··"${OLD_INC[@]}"; | ||
| 0003f960:· | 0003f960:·2064·6f20·6576·616c·2070·7269·6e74·6620···do·eval·printf· | ||
| 0003f970:·75 | 0003f970:·2725·735c·5c6e·2720·2224·7b49·4e43·5041··'%s\\n'·"${INCPA | ||
| 0003f980:· | 0003f980:·5448·7d22·3b20·646f·6e65·290a·7265·6164··TH}";·done).read | ||
| 0003f990:· | 0003f990:·6172·7261·7920·2d74·204e·4557·5f49·4e43··array·-t·NEW_INC | ||
| 0003f9a0:· | 0003f9a0:·2026·6c74·3b20·266c·743b·2873·6564·202d···<·<(sed·- | ||
| 0003f9b0:·6 | 0003f9b0:·6e20·272f·5e5c·732a·696e·636c·7564·6528··n·'/^\s*include( | ||
| 0003f9c0:· | 0003f9c0:·2f2c·2f29·2f49·7027·202f·6574·632f·7273··/,/)/Ip'·/etc/rs | ||
| 0003f9d0:· | 0003f9d0:·7973·6c6f·672e·636f·6e66·207c·2073·6564··yslog.conf·|·sed | ||
| 0003f9e0:· | 0003f9e0:·202d·6e20·2773·402e·2a66·696c·655c·732a···-n·'s@.*file\s* | ||
| 0003f9f0:· | 0003f9f0:·3d5c·732a·225c·285b·2f5b·3a61·6c6e·756d··=\s*"\([/[:alnum | ||
| 0003fa00:· | 0003fa00:·3a5d·5b3a·7075·6e63·743a·5d5d·2a5c·2922··:][:punct:]]*\)" | ||
| 0003fa10:· | 0003fa10:·2e2a·405c·3140·4970·2729·0a72·6561·6461··.*@\1@Ip').reada | ||
| 0003fa20:· | 0003fa20:·7272·6179·202d·7420·5253·5953·4c4f·475f··rray·-t·RSYSLOG_ | ||
| 0003fa30:· | 0003fa30:·494e·434c·5544·4520·266c·743b·2026·6c74··INCLUDE·<·< | ||
| 0003fa40:· | 0003fa40:·3b28·666f·7220·494e·4350·4154·4820·696e··;(for·INCPATH·in | ||
| 0003fa50:·202 | 0003fa50:·2022·247b·4e45·575f·494e·435b·405d·7d22···"${NEW_INC[@]}" | ||
| 0003fa60:· | 0003fa60:·3b20·646f·2065·7661·6c20·7072·696e·7466··;·do·eval·printf | ||
| 0003fa70:· | 0003fa70:·2027·2573·5c5c·6e27·2022·247b·494e·4350···'%s\\n'·"${INCP | ||
| 0003fa80:· | 0003fa80:·4154·487d·223b·2064·6f6e·6529·0a0a·2320··ATH}";·done)..#· | ||
| 0003fa90:· | 0003fa90:·4465·636c·6172·6520·616e·2061·7272·6179··Declare·an·array | ||
| 0003faa0:· | 0003faa0:·2074·6f20·686f·6c64·2074·6865·2066·696e···to·hold·the·fin | ||
| 0003fab0:·6 | 0003fab0:·616c·206c·6973·7420·6f66·2064·6966·6665··al·list·of·diffe | ||
| 0003fac0:· | 0003fac0:·7265·6e74·206c·6f67·2066·696c·6520·7061··rent·log·file·pa | ||
| 0003fad0:· | 0003fad0:·7468·730a·6465·636c·6172·6520·2d61·204c··ths.declare·-a·L | ||
| 0003fae0:· | 0003fae0:·4f47·5f46·494c·455f·5041·5448·530a·0a23··OG_FILE_PATHS..# | ||
| 0003faf0:·7 | 0003faf0:·2041·7272·6179·2074·6f20·686f·6c64·2061···Array·to·hold·a | ||
| 0003fb00:·6 | 0003fb00:·6c6c·2072·7379·736c·6f67·2063·6f6e·6669··ll·rsyslog·confi | ||
| 0003fb10:·6 | 0003fb10:·6720·656e·7472·6965·730a·5253·5953·4c4f··g·entries.RSYSLO | ||
| 0003fb20:· | 0003fb20:·475f·434f·4e46·4947·533d·2829·0a52·5359··G_CONFIGS=().RSY | ||
| 0003fb30:· | 0003fb30:·534c·4f47·5f43·4f4e·4649·4753·3d28·2224··SLOG_CONFIGS=("$ | ||
| 0003fb40:· | 0003fb40:·7b52·5359·534c·4f47·5f45·5443·5f43·4f4e··{RSYSLOG_ETC_CON | ||
| 0003fb50:· | 0003fb50:·4649·477d·2220·2224·7b52·5359·534c·4f47··FIG}"·"${RSYSLOG | ||
| 0003fb60:· | 0003fb60:·5f49·4e43·4c55·4445·5f43·4f4e·4649·475b··_INCLUDE_CONFIG[ | ||
| 0003fb70:· | 0003fb70:·405d·7d22·2022·247b·5253·5953·4c4f·475f··@]}"·"${RSYSLOG_ | ||
| 0003fb80:· | 0003fb80:·494e·434c·5544·455b·405d·7d22·290a·0a23··INCLUDE[@]}")..# | ||
| 0003fb90:· | 0003fb90:·2047·6574·2066·756c·6c20·6c69·7374·206f···Get·full·list·o | ||
| 0003fba0:· | 0003fba0:·6620·6669·6c65·7320·746f·2062·6520·6368··f·files·to·be·ch | ||
| 0003fbb0:·6 | 0003fbb0:·6563·6b65·640a·2320·5253·5953·4c4f·475f··ecked.#·RSYSLOG_ | ||
| 0003fbc0:· | 0003fbc0:·434f·4e46·4947·5320·6d61·7920·636f·6e74··CONFIGS·may·cont | ||
| 0003fbd0:· | 0003fbd0:·6169·6e20·676c·6f62·7320·7375·6368·2061··ain·globs·such·a | ||
| 0003fbe0:·73 | 0003fbe0:·730a·2320·2f65·7463·2f72·7379·736c·6f67··s.#·/etc/rsyslog | ||
| 0003fbf0:· | 0003fbf0:·2e64·2f2a·2e63·6f6e·6620·2f65·7463·2f72··.d/*.conf·/etc/r | ||
| 0003fc00:· | 0003fc00:·7379·736c·6f67·2e64·2f2a·2e66·7275·6c65··syslog.d/*.frule | ||
| 0003fc10:· | 0003fc10:·0a23·2053·6f2c·206c·6f6f·7020·6f76·6572··.#·So,·loop·over | ||
| 0003fc20:· | 0003fc20:·2074·6865·2065·6e74·7269·6573·2069·6e20···the·entries·in· | ||
| 0003fc30:· | 0003fc30:·5253·5953·4c4f·475f·434f·4e46·4947·5320··RSYSLOG_CONFIGS· | ||
| 0003fc40:· | 0003fc40:·616e·6420·7573·6520·6669·6e64·2074·6f20··and·use·find·to· | ||
| 0003fc50:· | 0003fc50:·6765·7420·7468·6520·6c69·7374·206f·6620··get·the·list·of· | ||
| 0003fc60:· | 0003fc60:·696e·636c·7564·6564·2066·696c·6573·2e0a··included·files.. | ||
| 0003fc70:· | 0003fc70:·5253·5953·4c4f·475f·434f·4e46·4947·5f46··RSYSLOG_CONFIG_F | ||
| 0003fc80:· | 0003fc80:·494c·4553·3d28·290a·666f·7220·454e·5452··ILES=().for·ENTR | ||
| 0003fc90:· | 0003fc90:·5920·696e·2022·247b·5253·5953·4c4f·475f··Y·in·"${RSYSLOG_ | ||
| 0003fca0:· | 0003fca0:·434f·4e46·4947·535b·405d·7d22·0a64·6f0a··CONFIGS[@]}".do. | ||
| 0003fcb0:· | 0003fcb0:·0923·2049·6620·6469·7265·6374·6f72·792c··.#·If·directory, | ||
| 0003fcc0:· | 0003fcc0:·2072·7379·736c·6f67·2077·696c·6c20·7365···rsyslog·will·se | ||
| Max diff block lines reached; 1002226/1104262 bytes (90.76%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·16.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·16.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 259, 14 lines modified | Offset 259, 139 lines modified | ||
| 259 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 259 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 260 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 260 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 261 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 261 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 262 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 262 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 263 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 263 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 264 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 264 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 265 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 | 265 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 |
| 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 267 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 268 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 269 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 270 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 271 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 272 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 273 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 274 | of·IncludeConfig) | ||
| 275 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 276 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 277 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 278 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 279 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 280 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 281 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 282 | '%s\\n'·"${INCPATH}";·done) | ||
| 283 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 284 | declare·-a·LOG_FILE_PATHS | ||
| 285 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 286 | RSYSLOG_CONFIGS=() | ||
| 287 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 288 | {RSYSLOG_INCLUDE[@]}") | ||
| 289 | #·Get·full·list·of·files·to·be·checked | ||
| 290 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 291 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 292 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 293 | included·files. | ||
| 294 | RSYSLOG_CONFIG_FILES=() | ||
| 295 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 296 | do | ||
| 297 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 298 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 299 | » if·[·-d·"${ENTRY}"·] | ||
| 300 | » then | ||
| 301 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 302 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 303 | » elif·[·-f·"${ENTRY}"·] | ||
| 304 | » then | ||
| 305 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 306 | » else | ||
| 307 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 308 | » fi | ||
| 309 | done | ||
| 310 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 311 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 312 | configuration) | ||
| 313 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 314 | do | ||
| 315 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 316 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 317 | ('$')·characters, | ||
| 318 | » #·*·Ignore·empty·lines, | ||
| 319 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 320 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 321 | not·log·files | ||
| 322 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 323 | path | ||
| 324 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 325 | all·of·the | ||
| 326 | » #·following·are·met: | ||
| 327 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 328 | » #·*·it·is·preceded·by·space | ||
| 329 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 330 | characters | ||
| 331 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 332 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 333 | » then | ||
| 334 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 335 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 336 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 337 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 338 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 339 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 340 | {FILTERED_PATHS}") | ||
| 341 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 342 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 343 | newline),·split | ||
| 344 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 345 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 346 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 347 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 348 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 349 | » » #·Delete·the·temporary·array | ||
| 350 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 351 | » fi | ||
| 352 | done | ||
| 353 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 354 | grep·regex·is·a·bit | ||
| 355 | #·curly: | ||
| 356 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 357 | #·extract·File="logfile"·expression | ||
| 358 | #·match·only·"logfile"·expression | ||
| 359 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 360 | do | ||
| 361 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 362 | "${LOG_FILE}") | ||
| 363 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| Max diff block lines reached; 132962/139551 bytes (95.28%) of diff not shown. | |||
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037d50:·3234·2d31·312d·303 | 00037d50:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 16036, 146 lines modified | Offset 16036, 146 lines modified | ||
| 0003ea30:·612d·7461·7267·6574·3d22·2369·646d·3139··a-target="#idm19 | 0003ea30:·612d·7461·7267·6574·3d22·2369·646d·3139··a-target="#idm19 | ||
| 0003ea40:·3738·2220·7461·6269·6e64·6578·3d22·3022··78"·tabindex="0" | 0003ea40:·3738·2220·7461·6269·6e64·6578·3d22·3022··78"·tabindex="0" | ||
| 0003ea50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ea50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ea60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ea60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ea70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ea70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ea80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ea80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ea90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ea90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003eaa0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003eab0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003eac0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ead0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003eae0:·6522·2069·643d·2269·646d·3139·3738·223e··e"·id="idm1978"> | |||
| 0003eaf0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003eb00:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003eb10:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003eb20:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003eb30:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003eb40:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003eb50:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003eb60:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003eb70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003eb80:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003eb90:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003eba0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ebb0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003ebc0:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003ebd0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003ebe0:·7072·653e·3c63·6f64·653e·0a66·6f72·2066··pre><code>.for·f | |||
| 0003ebf0:·2069·6e20·2f65·7463·2f73·7564·6f65·7273···in·/etc/sudoers | |||
| 0003ec00:·202f·6574·632f·7375·646f·6572·732e·642f···/etc/sudoers.d/ | |||
| 0003ec10:·2a20·3b20·646f·0a20·2069·6620·5b20·2120··*·;·do.··if·[·!· | |||
| 0003ec20:·2d65·2022·2466·2220·5d20·3b20·7468·656e··-e·"$f"·]·;·then | |||
| 0003ec30:·0a20·2020·2063·6f6e·7469·6e75·650a·2020··.····continue.·· | |||
| 0003ec40:·6669·0a20·206d·6174·6368·696e·675f·6c69··fi.··matching_li | |||
| 0003ec50:·7374·3d24·2867·7265·7020·2d50·2027·5e28··st=$(grep·-P·'^( | |||
| 0003ec60:·3f21·2329·2e2a·5b5c·735d·2b5c·2161·7574··?!#).*[\s]+\!aut | |||
| 0003ec70:·6865·6e74·6963·6174·652e·2a24·2720·2466··henticate.*$'·$f | |||
| 0003ec80:·207c·2075·6e69·7120·290a·2020·6966·2021···|·uniq·).··if·! | |||
| 0003ec90:·2074·6573·7420·2d7a·2022·246d·6174·6368···test·-z·"$match | |||
| 0003eca0:·696e·675f·6c69·7374·223b·2074·6865·6e0a··ing_list";·then. | |||
| 0003ecb0:·2020·2020·7768·696c·6520·4946·533d·2072······while·IFS=·r | |||
| 0003ecc0:·6561·6420·2d72·2065·6e74·7279·3b20·646f··ead·-r·entry;·do | |||
| 0003ecd0:·0a20·2020·2020·2023·2063·6f6d·6d65·6e74··.······#·comment | |||
| 0003ece0:·206f·7574·2022·2161·7574·6865·6e74·6963···out·"!authentic | |||
| 0003ecf0:·6174·6522·206d·6174·6368·6573·2074·6f20··ate"·matches·to· | |||
| 0003ed00:·7072·6573·6572·7665·2075·7365·7220·6461··preserve·user·da | |||
| 0003ed10:·7461·0a20·2020·2020·2073·6564·202d·6920··ta.······sed·-i· | |||
| 0003ed20:·2273·2f5e·247b·656e·7472·797d·242f·2320··"s/^${entry}$/#· | |||
| 0003ed30:·2661·6d70·3b2f·6722·2024·660a·2020·2020··&/g"·$f.···· | |||
| 0003ed40:·646f·6e65·2026·6c74·3b26·6c74·3b26·6c74··done·<<< | |||
| 0003ed50:·3b20·2224·6d61·7463·6869·6e67·5f6c·6973··;·"$matching_lis | |||
| 0003ed60:·7422·0a0a·2020·2020·2f75·7372·2f73·6269··t"..····/usr/sbi | |||
| 0003ed70:·6e2f·7669·7375·646f·202d·6366·2024·6620··n/visudo·-cf·$f· | |||
| 0003ed80:·2661·6d70·3b26·6774·3b20·2f64·6576·2f6e··&>·/dev/n | |||
| 0003ed90:·756c·6c20·7c7c·2065·6368·6f20·2246·6169··ull·||·echo·"Fai | |||
| 0003eda0:·6c20·746f·2076·616c·6964·6174·6520·2466··l·to·validate·$f | |||
| 0003edb0:·2077·6974·6820·7669·7375·646f·220a·2020···with·visudo".·· | |||
| 0003edc0:·6669·0a64·6f6e·650a·3c2f·636f·6465·3e3c··fi.done.</code>< | |||
| 0003edd0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003ede0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003edf0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003ee00:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003ee10:·612d·7461·7267·6574·3d22·2369·646d·3139··a-target="#idm19 | |||
| 0003ee20:·3739·2220·7461·6269·6e64·6578·3d22·3022··79"·tabindex="0" | |||
| 0003ee30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003ee40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003ee50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003ee60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003ee70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003e | 0003ee80:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003e | 0003ee90:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003e | 0003eea0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003ead0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003eae0:·6170·7365·2220·6964·3d22·6964·6d31·3937··apse"·id="idm197 | |||
| 0003eaf0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003eb00:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003eb10:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003eb20:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003eb30:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003eb40:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003eb50:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003eb60:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003eb70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003eb80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003eb90:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003eba0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003ebb0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003ebc0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003ebd0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003ebe0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003ebf0:·616d·653a·2046·696e·6420·2f65·7463·2f73··ame:·Find·/etc/s | |||
| 0003ec00:·7564·6f65·7273·2e64·2f20·6669·6c65·730a··udoers.d/·files. | |||
| 0003ec10:·2020·616e·7369·626c·652e·6275·696c·7469····ansible.builti | |||
| 0003ec20:·6e2e·6669·6e64·3a0a·2020·2020·7061·7468··n.find:.····path | |||
| 0003ec30:·733a·0a20·2020·202d·202f·6574·632f·7375··s:.····-·/etc/su | |||
| 0003ec40:·646f·6572·732e·642f·0a20·2072·6567·6973··doers.d/.··regis | |||
| 0003ec50:·7465·723a·2073·7564·6f65·7273·0a20·2074··ter:·sudoers.··t | |||
| 0003ec60:·6167·733a·0a20·202d·204e·4953·542d·3830··ags:.··-·NIST-80 | |||
| 0003ec70:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003ec80:·204e·4953·542d·3830·302d·3533·2d49·412d···NIST-800-53-IA- | |||
| 0003ec90:·3131·0a20·202d·206c·6f77·5f63·6f6d·706c··11.··-·low_compl | |||
| 0003eca0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003ecb0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003ecc0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003ecd0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003ece0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | |||
| 0003ecf0:·7472·6174·6567·790a·2020·2d20·7375·646f··trategy.··-·sudo | |||
| 0003ed00:·5f72·656d·6f76·655f·6e6f·5f61·7574·6865··_remove_no_authe | |||
| 0003ed10:·6e74·6963·6174·650a·0a2d·206e·616d·653a··nticate..-·name: | |||
| 0003ed20:·2052·656d·6f76·6520·6c69·6e65·7320·636f···Remove·lines·co | |||
| 0003ed30:·6e74·6169·6e69·6e67·2021·6175·7468·656e··ntaining·!authen | |||
| Max diff block lines reached; 910012/929938 bytes (97.86%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 232, 14 lines modified | Offset 232, 35 lines modified | ||
| 232 | ···························1.7,·SR·1.8,·SR·1.9 | 232 | ···························1.7,·SR·1.8,·SR·1.9 |
| 233 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 233 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 234 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 234 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 235 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 235 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 236 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 236 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 238 | ···························SRG-OS-000373-GPOS-00158 | 238 | ···························SRG-OS-000373-GPOS-00158 |
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 244 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 245 | ··if·[·!·-e·"$f"·]·;·then | ||
| 246 | ····continue | ||
| 247 | ··fi | ||
| 248 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 249 | ··if·!·test·-z·"$matching_list";·then | ||
| 250 | ····while·IFS=·read·-r·entry;·do | ||
| 251 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 252 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 253 | ····done·<<<·"$matching_list" | ||
| 254 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 255 | visudo" | ||
| 256 | ··fi | ||
| 257 | done | ||
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 259 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 260 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 261 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 262 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 244 | -·name:·Find·/etc/sudoers.d/·files | 263 | -·name:·Find·/etc/sudoers.d/·files |
| 245 | ··ansible.builtin.find: | 264 | ··ansible.builtin.find: |
| Offset 270, 35 lines modified | Offset 291, 14 lines modified | ||
| 270 | ··-·NIST-800-53-IA-11 | 291 | ··-·NIST-800-53-IA-11 |
| 271 | ··-·low_complexity | 292 | ··-·low_complexity |
| 272 | ··-·low_disruption | 293 | ··-·low_disruption |
| 273 | ··-·medium_severity | 294 | ··-·medium_severity |
| 274 | ··-·no_reboot_needed | 295 | ··-·no_reboot_needed |
| 275 | ··-·restrict_strategy | 296 | ··-·restrict_strategy |
| 276 | ··-·sudo_remove_no_authenticate | 297 | ··-·sudo_remove_no_authenticate |
| 277 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 278 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 279 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 280 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 281 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 282 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 283 | ··if·[·!·-e·"$f"·]·;·then | ||
| 284 | ····continue | ||
| 285 | ··fi | ||
| 286 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 287 | ··if·!·test·-z·"$matching_list";·then | ||
| 288 | ····while·IFS=·read·-r·entry;·do | ||
| 289 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 290 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 291 | ····done·<<<·"$matching_list" | ||
| 292 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 293 | visudo" | ||
| 294 | ··fi | ||
| 295 | done | ||
| 296 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 298 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 297 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 299 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 298 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 300 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 299 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 301 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 300 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 302 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 301 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 303 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 302 | ············Without·re-authentication,·users·may·access·resources·or·perform | 304 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 319, 14 lines modified | Offset 319, 35 lines modified | ||
| 319 | ···························1.7,·SR·1.8,·SR·1.9 | 319 | ···························1.7,·SR·1.8,·SR·1.9 |
| 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 321 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 321 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 322 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 322 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 324 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 324 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 325 | ···························SRG-OS-000373-GPOS-00158 | 325 | ···························SRG-OS-000373-GPOS-00158 |
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 331 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 332 | ··if·[·!·-e·"$f"·]·;·then | ||
| 333 | ····continue | ||
| 334 | ··fi | ||
| 335 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 336 | ··if·!·test·-z·"$matching_list";·then | ||
| 337 | ····while·IFS=·read·-r·entry;·do | ||
| 338 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 339 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 340 | ····done·<<<·"$matching_list" | ||
| 341 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 342 | visudo" | ||
| 343 | ··fi | ||
| 344 | done | ||
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 345 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 346 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 347 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 348 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 349 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 331 | -·name:·Find·/etc/sudoers.d/·files | 350 | -·name:·Find·/etc/sudoers.d/·files |
| 332 | ··ansible.builtin.find: | 351 | ··ansible.builtin.find: |
| Offset 357, 35 lines modified | Offset 378, 14 lines modified | ||
| 357 | ··-·NIST-800-53-IA-11 | 378 | ··-·NIST-800-53-IA-11 |
| 358 | ··-·low_complexity | 379 | ··-·low_complexity |
| 359 | ··-·low_disruption | 380 | ··-·low_disruption |
| Max diff block lines reached; 109955/115704 bytes (95.03%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d60:·206f·6620·3230·3234·2d31·312d·303 | 00037d60:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16056, 146 lines modified | Offset 16056, 146 lines modified | ||
| 0003eb70:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003eb70:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003eb80:·646d·3139·3738·2220·7461·6269·6e64·6578··dm1978"·tabindex | 0003eb80:·646d·3139·3738·2220·7461·6269·6e64·6578··dm1978"·tabindex | ||
| 0003eb90:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003eb90:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003eba0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003eba0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003ebb0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003ebb0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003ebc0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003ebc0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003ebd0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003ebd0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003ebe0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003ebf0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003ec00:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ec10:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ec20:·6c61·7073·6522·2069·643d·2269·646d·3139··lapse"·id="idm19 | |||
| 0003ec30:·3738·223e·3c74·6162·6c65·2063·6c61·7373··78"><table·class | |||
| 0003ec40:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ec50:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ec60:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ec70:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ec80:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ec90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003eca0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ecb0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003ecc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ecd0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003ece0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003ecf0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003ed00:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 0003ed10:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 0003ed20:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a66··le><pre><code>.f | |||
| 0003ed30:·6f72·2066·2069·6e20·2f65·7463·2f73·7564··or·f·in·/etc/sud | |||
| 0003ed40:·6f65·7273·202f·6574·632f·7375·646f·6572··oers·/etc/sudoer | |||
| 0003ed50:·732e·642f·2a20·3b20·646f·0a20·2069·6620··s.d/*·;·do.··if· | |||
| 0003ed60:·5b20·2120·2d65·2022·2466·2220·5d20·3b20··[·!·-e·"$f"·]·;· | |||
| 0003ed70:·7468·656e·0a20·2020·2063·6f6e·7469·6e75··then.····continu | |||
| 0003ed80:·650a·2020·6669·0a20·206d·6174·6368·696e··e.··fi.··matchin | |||
| 0003ed90:·675f·6c69·7374·3d24·2867·7265·7020·2d50··g_list=$(grep·-P | |||
| 0003eda0:·2027·5e28·3f21·2329·2e2a·5b5c·735d·2b5c···'^(?!#).*[\s]+\ | |||
| 0003edb0:·2161·7574·6865·6e74·6963·6174·652e·2a24··!authenticate.*$ | |||
| 0003edc0:·2720·2466·207c·2075·6e69·7120·290a·2020··'·$f·|·uniq·).·· | |||
| 0003edd0:·6966·2021·2074·6573·7420·2d7a·2022·246d··if·!·test·-z·"$m | |||
| 0003ede0:·6174·6368·696e·675f·6c69·7374·223b·2074··atching_list";·t | |||
| 0003edf0:·6865·6e0a·2020·2020·7768·696c·6520·4946··hen.····while·IF | |||
| 0003ee00:·533d·2072·6561·6420·2d72·2065·6e74·7279··S=·read·-r·entry | |||
| 0003ee10:·3b20·646f·0a20·2020·2020·2023·2063·6f6d··;·do.······#·com | |||
| 0003ee20:·6d65·6e74·206f·7574·2022·2161·7574·6865··ment·out·"!authe | |||
| 0003ee30:·6e74·6963·6174·6522·206d·6174·6368·6573··nticate"·matches | |||
| 0003ee40:·2074·6f20·7072·6573·6572·7665·2075·7365···to·preserve·use | |||
| 0003ee50:·7220·6461·7461·0a20·2020·2020·2073·6564··r·data.······sed | |||
| 0003ee60:·202d·6920·2273·2f5e·247b·656e·7472·797d···-i·"s/^${entry} | |||
| 0003ee70:·242f·2320·2661·6d70·3b2f·6722·2024·660a··$/#·&/g"·$f. | |||
| 0003ee80:·2020·2020·646f·6e65·2026·6c74·3b26·6c74······done·<< | |||
| 0003ee90:·3b26·6c74·3b20·2224·6d61·7463·6869·6e67··;<·"$matching | |||
| 0003eea0:·5f6c·6973·7422·0a0a·2020·2020·2f75·7372··_list"..····/usr | |||
| 0003eeb0:·2f73·6269·6e2f·7669·7375·646f·202d·6366··/sbin/visudo·-cf | |||
| 0003eec0:·2024·6620·2661·6d70·3b26·6774·3b20·2f64···$f·&>·/d | |||
| 0003eed0:·6576·2f6e·756c·6c20·7c7c·2065·6368·6f20··ev/null·||·echo· | |||
| 0003eee0:·2246·6169·6c20·746f·2076·616c·6964·6174··"Fail·to·validat | |||
| 0003eef0:·6520·2466·2077·6974·6820·7669·7375·646f··e·$f·with·visudo | |||
| 0003ef00:·220a·2020·6669·0a64·6f6e·650a·3c2f·636f··".··fi.done.</co | |||
| 0003ef10:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003ef20:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003ef30:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003ef40:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003ef50:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003ef60:·646d·3139·3739·2220·7461·6269·6e64·6578··dm1979"·tabindex | |||
| 0003ef70:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003ef80:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003ef90:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003efa0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003efb0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003e | 0003efc0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003e | 0003efd0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003e | 0003efe0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003e | 0003eff0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003ec20:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ec30:·6d31·3937·3822·3e3c·7461·626c·6520·636c··m1978"><table·cl | |||
| 0003ec40:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ec50:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ec60:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ec70:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ec80:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003ec90:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003eca0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ecb0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ecc0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ecd0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ece0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003ecf0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003ed00:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003ed10:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003ed20:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ed30:·3e2d·206e·616d·653a·2046·696e·6420·2f65··>-·name:·Find·/e | |||
| 0003ed40:·7463·2f73·7564·6f65·7273·2e64·2f20·6669··tc/sudoers.d/·fi | |||
| 0003ed50:·6c65·730a·2020·616e·7369·626c·652e·6275··les.··ansible.bu | |||
| 0003ed60:·696c·7469·6e2e·6669·6e64·3a0a·2020·2020··iltin.find:.···· | |||
| 0003ed70:·7061·7468·733a·0a20·2020·202d·202f·6574··paths:.····-·/et | |||
| 0003ed80:·632f·7375·646f·6572·732e·642f·0a20·2072··c/sudoers.d/.··r | |||
| 0003ed90:·6567·6973·7465·723a·2073·7564·6f65·7273··egister:·sudoers | |||
| 0003eda0:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 0003edb0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003edc0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003edd0:·2d49·412d·3131·0a20·202d·206c·6f77·5f63··-IA-11.··-·low_c | |||
| 0003ede0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003edf0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003ee00:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003ee10:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003ee20:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | |||
| 0003ee30:·6374·5f73·7472·6174·6567·790a·2020·2d20··ct_strategy.··-· | |||
| 0003ee40:·7375·646f·5f72·656d·6f76·655f·6e6f·5f61··sudo_remove_no_a | |||
| 0003ee50:·7574·6865·6e74·6963·6174·650a·0a2d·206e··uthenticate..-·n | |||
| 0003ee60:·616d·653a·2052·656d·6f76·6520·6c69·6e65··ame:·Remove·line | |||
| 0003ee70:·7320·636f·6e74·6169·6e69·6e67·2021·6175··s·containing·!au | |||
| Max diff block lines reached; 1064464/1084390 bytes (98.16%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 236, 14 lines modified | Offset 236, 35 lines modified | ||
| 236 | ···························1.7,·SR·1.8,·SR·1.9 | 236 | ···························1.7,·SR·1.8,·SR·1.9 |
| 237 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 237 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 238 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 238 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 239 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 239 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 240 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 240 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 242 | ···························SRG-OS-000373-GPOS-00158 | 242 | ···························SRG-OS-000373-GPOS-00158 |
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 246 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 247 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 248 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 249 | ··if·[·!·-e·"$f"·]·;·then | ||
| 250 | ····continue | ||
| 251 | ··fi | ||
| 252 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 253 | ··if·!·test·-z·"$matching_list";·then | ||
| 254 | ····while·IFS=·read·-r·entry;·do | ||
| 255 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 256 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 257 | ····done·<<<·"$matching_list" | ||
| 258 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 259 | visudo" | ||
| 260 | ··fi | ||
| 261 | done | ||
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 262 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 263 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 264 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 246 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 265 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 247 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 266 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 248 | -·name:·Find·/etc/sudoers.d/·files | 267 | -·name:·Find·/etc/sudoers.d/·files |
| 249 | ··ansible.builtin.find: | 268 | ··ansible.builtin.find: |
| Offset 274, 35 lines modified | Offset 295, 14 lines modified | ||
| 274 | ··-·NIST-800-53-IA-11 | 295 | ··-·NIST-800-53-IA-11 |
| 275 | ··-·low_complexity | 296 | ··-·low_complexity |
| 276 | ··-·low_disruption | 297 | ··-·low_disruption |
| 277 | ··-·medium_severity | 298 | ··-·medium_severity |
| 278 | ··-·no_reboot_needed | 299 | ··-·no_reboot_needed |
| 279 | ··-·restrict_strategy | 300 | ··-·restrict_strategy |
| 280 | ··-·sudo_remove_no_authenticate | 301 | ··-·sudo_remove_no_authenticate |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 286 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 287 | ··if·[·!·-e·"$f"·]·;·then | ||
| 288 | ····continue | ||
| 289 | ··fi | ||
| 290 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 291 | ··if·!·test·-z·"$matching_list";·then | ||
| 292 | ····while·IFS=·read·-r·entry;·do | ||
| 293 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 294 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 295 | ····done·<<<·"$matching_list" | ||
| 296 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 297 | visudo" | ||
| 298 | ··fi | ||
| 299 | done | ||
| 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 301 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 303 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 302 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 304 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 303 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 305 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 304 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 306 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 305 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 307 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 306 | ············Without·re-authentication,·users·may·access·resources·or·perform | 308 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 323, 14 lines modified | Offset 323, 35 lines modified | ||
| 323 | ···························1.7,·SR·1.8,·SR·1.9 | 323 | ···························1.7,·SR·1.8,·SR·1.9 |
| 324 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 324 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 325 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 325 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 326 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 326 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 328 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 328 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 329 | ···························SRG-OS-000373-GPOS-00158 | 329 | ···························SRG-OS-000373-GPOS-00158 |
| 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 335 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 336 | ··if·[·!·-e·"$f"·]·;·then | ||
| 337 | ····continue | ||
| 338 | ··fi | ||
| 339 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 340 | ··if·!·test·-z·"$matching_list";·then | ||
| 341 | ····while·IFS=·read·-r·entry;·do | ||
| 342 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 343 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 344 | ····done·<<<·"$matching_list" | ||
| 345 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 346 | visudo" | ||
| 347 | ··fi | ||
| 348 | done | ||
| 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 350 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 351 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 352 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 353 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 335 | -·name:·Find·/etc/sudoers.d/·files | 354 | -·name:·Find·/etc/sudoers.d/·files |
| 336 | ··ansible.builtin.find: | 355 | ··ansible.builtin.find: |
| Offset 361, 35 lines modified | Offset 382, 14 lines modified | ||
| 361 | ··-·NIST-800-53-IA-11 | 382 | ··-·NIST-800-53-IA-11 |
| 362 | ··-·low_complexity | 383 | ··-·low_complexity |
| 363 | ··-·low_disruption | 384 | ··-·low_disruption |
| Max diff block lines reached; 130830/136584 bytes (95.79%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·3234·2d31·312d·303 | 00037cf0:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 14774, 147 lines modified | Offset 14774, 147 lines modified | ||
| 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00039b60:·743d·2223·6964·6d31·3937·3822·2074·6162··t="#idm1978"·tab | 00039b60:·743d·2223·6964·6d31·3937·3822·2074·6162··t="#idm1978"·tab | ||
| 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00039bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00039bd0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00039be0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00039bf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00039c00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00039c10:·6964·6d31·3937·3822·3e3c·7461·626c·6520··idm1978"><table· | |||
| 00039c20:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039c30:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039c40:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039c50:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039c60:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039c70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039c80:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039c90:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039ca0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039cb0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039cc0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039cd0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039ce0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 00039cf0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 00039d00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00039d10:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 00039d20:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 00039d30:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 00039d40:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 00039d50:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 00039d60:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 00039d70:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 00039d80:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 00039d90:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 00039da0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 00039db0:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 00039dc0:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 00039dd0:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 00039de0:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 00039df0:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 00039e00:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 00039e10:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 00039e20:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 00039e30:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 00039e40:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 00039e50:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 00039e60:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 00039e70:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 00039e80:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 00039e90:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 00039ea0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 00039eb0:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 00039ec0:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 00039ed0:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 00039ee0:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 00039ef0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039f00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039f10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039f20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039f30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00039f40:·743d·2223·6964·6d31·3937·3922·2074·6162··t="#idm1979"·tab | |||
| 00039f50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039f60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039f70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039f80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039f90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039 | 00039fa0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00039 | 00039fb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 00039 | 00039fc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00039 | 00039fd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00039 | 00039fe0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00039c10:·643d·2269·646d·3139·3738·223e·3c74·6162··d="idm1978"><tab | |||
| 00039c20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00039c30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00039c40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00039c50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00039c60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00039c70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039c80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00039c90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00039ca0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039cb0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00039cc0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00039cd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00039ce0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00039cf0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 00039d00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00039d10:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 00039d20:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 00039d30:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 00039d40:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 00039d50:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 00039d60:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 00039d70:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 00039d80:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 00039d90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 00039da0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 00039dc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 00039dd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 00039de0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 00039df0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 00039e00:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 00039e10:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 00039e20:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 00039e30:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 00039e40:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 00039e50:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| Max diff block lines reached; 272198/292262 bytes (93.13%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 40 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 90, 14 lines modified | Offset 90, 35 lines modified | ||
| 90 | ···························1.7,·SR·1.8,·SR·1.9 | 90 | ···························1.7,·SR·1.8,·SR·1.9 |
| 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 96 | ···························SRG-OS-000373-GPOS-00158 | 96 | ···························SRG-OS-000373-GPOS-00158 |
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 102 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 103 | ··if·[·!·-e·"$f"·]·;·then | ||
| 104 | ····continue | ||
| 105 | ··fi | ||
| 106 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 107 | ··if·!·test·-z·"$matching_list";·then | ||
| 108 | ····while·IFS=·read·-r·entry;·do | ||
| 109 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 110 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 111 | ····done·<<<·"$matching_list" | ||
| 112 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 113 | visudo" | ||
| 114 | ··fi | ||
| 115 | done | ||
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 102 | -·name:·Find·/etc/sudoers.d/·files | 121 | -·name:·Find·/etc/sudoers.d/·files |
| 103 | ··ansible.builtin.find: | 122 | ··ansible.builtin.find: |
| Offset 128, 35 lines modified | Offset 149, 14 lines modified | ||
| 128 | ··-·NIST-800-53-IA-11 | 149 | ··-·NIST-800-53-IA-11 |
| 129 | ··-·low_complexity | 150 | ··-·low_complexity |
| 130 | ··-·low_disruption | 151 | ··-·low_disruption |
| 131 | ··-·medium_severity | 152 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 133 | ··-·restrict_strategy | 154 | ··-·restrict_strategy |
| 134 | ··-·sudo_remove_no_authenticate | 155 | ··-·sudo_remove_no_authenticate |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 140 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 141 | ··if·[·!·-e·"$f"·]·;·then | ||
| 142 | ····continue | ||
| 143 | ··fi | ||
| 144 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 145 | ··if·!·test·-z·"$matching_list";·then | ||
| 146 | ····while·IFS=·read·-r·entry;·do | ||
| 147 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 148 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 149 | ····done·<<<·"$matching_list" | ||
| 150 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 151 | visudo" | ||
| 152 | ··fi | ||
| 153 | done | ||
| 154 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 155 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 157 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 156 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 158 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 157 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 159 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 158 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 160 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 159 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 161 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 160 | ············Without·re-authentication,·users·may·access·resources·or·perform | 162 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 177, 14 lines modified | Offset 177, 35 lines modified | ||
| 177 | ···························1.7,·SR·1.8,·SR·1.9 | 177 | ···························1.7,·SR·1.8,·SR·1.9 |
| 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 183 | ···························SRG-OS-000373-GPOS-00158 | 183 | ···························SRG-OS-000373-GPOS-00158 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 189 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 190 | ··if·[·!·-e·"$f"·]·;·then | ||
| 191 | ····continue | ||
| 192 | ··fi | ||
| 193 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 194 | ··if·!·test·-z·"$matching_list";·then | ||
| 195 | ····while·IFS=·read·-r·entry;·do | ||
| 196 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 197 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 198 | ····done·<<<·"$matching_list" | ||
| 199 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 200 | visudo" | ||
| 201 | ··fi | ||
| 202 | done | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 189 | -·name:·Find·/etc/sudoers.d/·files | 208 | -·name:·Find·/etc/sudoers.d/·files |
| 190 | ··ansible.builtin.find: | 209 | ··ansible.builtin.find: |
| Offset 215, 35 lines modified | Offset 236, 14 lines modified | ||
| 215 | ··-·NIST-800-53-IA-11 | 236 | ··-·NIST-800-53-IA-11 |
| 216 | ··-·low_complexity | 237 | ··-·low_complexity |
| 217 | ··-·low_disruption | 238 | ··-·low_disruption |
| Max diff block lines reached; 34545/40286 bytes (85.75%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d30:·6173·206f·6620·3230·3234·2d31·312d·303 | 00037d30:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 16047, 146 lines modified | Offset 16047, 146 lines modified | ||
| 0003eae0:·7267·6574·3d22·2369·646d·3139·3738·2220··rget="#idm1978"· | 0003eae0:·7267·6574·3d22·2369·646d·3139·3738·2220··rget="#idm1978"· | ||
| 0003eaf0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003eaf0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003eb00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003eb00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003eb10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003eb10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003eb20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003eb20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003eb30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003eb30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003eb40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003eb40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003eb50:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003eb60:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003eb70:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003eb80:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003eb90:·643d·2269·646d·3139·3738·223e·3c74·6162··d="idm1978"><tab | |||
| 0003eba0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003ebb0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ebc0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ebd0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ebe0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ebf0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ec00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ec10:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003ec20:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ec30:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ec40:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003ec50:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003ec60:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003ec70:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003ec80:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ec90:·3c63·6f64·653e·0a66·6f72·2066·2069·6e20··<code>.for·f·in· | |||
| 0003eca0:·2f65·7463·2f73·7564·6f65·7273·202f·6574··/etc/sudoers·/et | |||
| 0003ecb0:·632f·7375·646f·6572·732e·642f·2a20·3b20··c/sudoers.d/*·;· | |||
| 0003ecc0:·646f·0a20·2069·6620·5b20·2120·2d65·2022··do.··if·[·!·-e·" | |||
| 0003ecd0:·2466·2220·5d20·3b20·7468·656e·0a20·2020··$f"·]·;·then.··· | |||
| 0003ece0:·2063·6f6e·7469·6e75·650a·2020·6669·0a20···continue.··fi.· | |||
| 0003ecf0:·206d·6174·6368·696e·675f·6c69·7374·3d24···matching_list=$ | |||
| 0003ed00:·2867·7265·7020·2d50·2027·5e28·3f21·2329··(grep·-P·'^(?!#) | |||
| 0003ed10:·2e2a·5b5c·735d·2b5c·2161·7574·6865·6e74··.*[\s]+\!authent | |||
| 0003ed20:·6963·6174·652e·2a24·2720·2466·207c·2075··icate.*$'·$f·|·u | |||
| 0003ed30:·6e69·7120·290a·2020·6966·2021·2074·6573··niq·).··if·!·tes | |||
| 0003ed40:·7420·2d7a·2022·246d·6174·6368·696e·675f··t·-z·"$matching_ | |||
| 0003ed50:·6c69·7374·223b·2074·6865·6e0a·2020·2020··list";·then.···· | |||
| 0003ed60:·7768·696c·6520·4946·533d·2072·6561·6420··while·IFS=·read· | |||
| 0003ed70:·2d72·2065·6e74·7279·3b20·646f·0a20·2020··-r·entry;·do.··· | |||
| 0003ed80:·2020·2023·2063·6f6d·6d65·6e74·206f·7574·····#·comment·out | |||
| 0003ed90:·2022·2161·7574·6865·6e74·6963·6174·6522···"!authenticate" | |||
| 0003eda0:·206d·6174·6368·6573·2074·6f20·7072·6573···matches·to·pres | |||
| 0003edb0:·6572·7665·2075·7365·7220·6461·7461·0a20··erve·user·data.· | |||
| 0003edc0:·2020·2020·2073·6564·202d·6920·2273·2f5e·······sed·-i·"s/^ | |||
| 0003edd0:·247b·656e·7472·797d·242f·2320·2661·6d70··${entry}$/#·& | |||
| 0003ede0:·3b2f·6722·2024·660a·2020·2020·646f·6e65··;/g"·$f.····done | |||
| 0003edf0:·2026·6c74·3b26·6c74·3b26·6c74·3b20·2224···<<<·"$ | |||
| 0003ee00:·6d61·7463·6869·6e67·5f6c·6973·7422·0a0a··matching_list".. | |||
| 0003ee10:·2020·2020·2f75·7372·2f73·6269·6e2f·7669······/usr/sbin/vi | |||
| 0003ee20:·7375·646f·202d·6366·2024·6620·2661·6d70··sudo·-cf·$f·& | |||
| 0003ee30:·3b26·6774·3b20·2f64·6576·2f6e·756c·6c20··;>·/dev/null· | |||
| 0003ee40:·7c7c·2065·6368·6f20·2246·6169·6c20·746f··||·echo·"Fail·to | |||
| 0003ee50:·2076·616c·6964·6174·6520·2466·2077·6974···validate·$f·wit | |||
| 0003ee60:·6820·7669·7375·646f·220a·2020·6669·0a64··h·visudo".··fi.d | |||
| 0003ee70:·6f6e·650a·3c2f·636f·6465·3e3c·2f70·7265··one.</code></pre | |||
| 0003ee80:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003ee90:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003eea0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003eeb0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003eec0:·7267·6574·3d22·2369·646d·3139·3739·2220··rget="#idm1979"· | |||
| 0003eed0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003eee0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003eef0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003ef00:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003ef10:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003ef20:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003e | 0003ef30:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003e | 0003ef40:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003e | 0003ef50:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003e | 0003ef60:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003e | 0003ef70:·2220·6964·3d22·6964·6d31·3937·3922·3e3c··"·id="idm1979">< | ||
| 0003e | 0003ef80:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003e | 0003ef90:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003e | 0003efa0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003e | 0003efb0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003e | 0003efc0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003e | 0003efd0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003e | 0003efe0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003e | 0003eff0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003ec20:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ec30:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003ec40:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003ec50:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ec60:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003ec70:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | |||
| 0003ec80:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003ec90:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003eca0:·2046·696e·6420·2f65·7463·2f73·7564·6f65···Find·/etc/sudoe | |||
| 0003ecb0:·7273·2e64·2f20·6669·6c65·730a·2020·616e··rs.d/·files.··an | |||
| 0003ecc0:·7369·626c·652e·6275·696c·7469·6e2e·6669··sible.builtin.fi | |||
| 0003ecd0:·6e64·3a0a·2020·2020·7061·7468·733a·0a20··nd:.····paths:.· | |||
| 0003ece0:·2020·202d·202f·6574·632f·7375·646f·6572·····-·/etc/sudoer | |||
| 0003ecf0:·732e·642f·0a20·2072·6567·6973·7465·723a··s.d/.··register: | |||
| 0003ed00:·2073·7564·6f65·7273·0a20·2074·6167·733a···sudoers.··tags: | |||
| 0003ed10:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003ed20:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| 0003ed30:·542d·3830·302d·3533·2d49·412d·3131·0a20··T-800-53-IA-11.· | |||
| 0003ed40:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003ed50:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003ed60:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003ed70:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003ed80:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003ed90:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | |||
| 0003eda0:·6567·790a·2020·2d20·7375·646f·5f72·656d··egy.··-·sudo_rem | |||
| 0003edb0:·6f76·655f·6e6f·5f61·7574·6865·6e74·6963··ove_no_authentic | |||
| 0003edc0:·6174·650a·0a2d·206e·616d·653a·2052·656d··ate..-·name:·Rem | |||
| 0003edd0:·6f76·6520·6c69·6e65·7320·636f·6e74·6169··ove·lines·contai | |||
| 0003ede0:·6e69·6e67·2021·6175·7468·656e·7469·6361··ning·!authentica | |||
| Max diff block lines reached; 1050774/1070700 bytes (98.14%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 234, 14 lines modified | Offset 234, 35 lines modified | ||
| 234 | ···························1.7,·SR·1.8,·SR·1.9 | 234 | ···························1.7,·SR·1.8,·SR·1.9 |
| 235 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 235 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 236 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 236 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 237 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 237 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 239 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 239 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 240 | ···························SRG-OS-000373-GPOS-00158 | 240 | ···························SRG-OS-000373-GPOS-00158 |
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 246 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 247 | ··if·[·!·-e·"$f"·]·;·then | ||
| 248 | ····continue | ||
| 249 | ··fi | ||
| 250 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 251 | ··if·!·test·-z·"$matching_list";·then | ||
| 252 | ····while·IFS=·read·-r·entry;·do | ||
| 253 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 254 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 255 | ····done·<<<·"$matching_list" | ||
| 256 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 257 | visudo" | ||
| 258 | ··fi | ||
| 259 | done | ||
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 246 | -·name:·Find·/etc/sudoers.d/·files | 265 | -·name:·Find·/etc/sudoers.d/·files |
| 247 | ··ansible.builtin.find: | 266 | ··ansible.builtin.find: |
| Offset 272, 35 lines modified | Offset 293, 14 lines modified | ||
| 272 | ··-·NIST-800-53-IA-11 | 293 | ··-·NIST-800-53-IA-11 |
| 273 | ··-·low_complexity | 294 | ··-·low_complexity |
| 274 | ··-·low_disruption | 295 | ··-·low_disruption |
| 275 | ··-·medium_severity | 296 | ··-·medium_severity |
| 276 | ··-·no_reboot_needed | 297 | ··-·no_reboot_needed |
| 277 | ··-·restrict_strategy | 298 | ··-·restrict_strategy |
| 278 | ··-·sudo_remove_no_authenticate | 299 | ··-·sudo_remove_no_authenticate |
| 279 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 280 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 281 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 282 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 283 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 284 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 285 | ··if·[·!·-e·"$f"·]·;·then | ||
| 286 | ····continue | ||
| 287 | ··fi | ||
| 288 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 289 | ··if·!·test·-z·"$matching_list";·then | ||
| 290 | ····while·IFS=·read·-r·entry;·do | ||
| 291 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 292 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 293 | ····done·<<<·"$matching_list" | ||
| 294 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 295 | visudo" | ||
| 296 | ··fi | ||
| 297 | done | ||
| 298 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 299 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 301 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 300 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 302 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 301 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 303 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 302 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 304 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 303 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 305 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 304 | ············Without·re-authentication,·users·may·access·resources·or·perform | 306 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 321, 14 lines modified | Offset 321, 35 lines modified | ||
| 321 | ···························1.7,·SR·1.8,·SR·1.9 | 321 | ···························1.7,·SR·1.8,·SR·1.9 |
| 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 323 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 323 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 324 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 324 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 327 | ···························SRG-OS-000373-GPOS-00158 | 327 | ···························SRG-OS-000373-GPOS-00158 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 333 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 334 | ··if·[·!·-e·"$f"·]·;·then | ||
| 335 | ····continue | ||
| 336 | ··fi | ||
| 337 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 338 | ··if·!·test·-z·"$matching_list";·then | ||
| 339 | ····while·IFS=·read·-r·entry;·do | ||
| 340 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 341 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 342 | ····done·<<<·"$matching_list" | ||
| 343 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 344 | visudo" | ||
| 345 | ··fi | ||
| 346 | done | ||
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 333 | -·name:·Find·/etc/sudoers.d/·files | 352 | -·name:·Find·/etc/sudoers.d/·files |
| 334 | ··ansible.builtin.find: | 353 | ··ansible.builtin.find: |
| Offset 359, 35 lines modified | Offset 380, 14 lines modified | ||
| 359 | ··-·NIST-800-53-IA-11 | 380 | ··-·NIST-800-53-IA-11 |
| 360 | ··-·low_complexity | 381 | ··-·low_complexity |
| 361 | ··-·low_disruption | 382 | ··-·low_disruption |
| Max diff block lines reached; 128941/134683 bytes (95.74%) of diff not shown. | |||
| Offset 14283, 15 lines modified | Offset 14283, 15 lines modified | ||
| 00037ca0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037ca0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037cb0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037cb0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037cc0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037cc0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037cd0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037cd0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ce0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ce0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037cf0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cf0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d00:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00037d00:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037d10:·303 | 00037d10:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00037d20:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037d20:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037d30:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037d30:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037d40:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037d40:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037d50:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037d50:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037d60:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037d60:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037d70:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037d70:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037d80:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037d80:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 16680, 168 lines modified | Offset 16680, 168 lines modified | ||
| 00041270:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00041270:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00041280:·2223·6964·6d36·3836·3622·2074·6162·696e··"#idm6866"·tabin | 00041280:·2223·6964·6d36·3836·3622·2074·6162·696e··"#idm6866"·tabin | ||
| 00041290:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 00041290:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 000412a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 000412a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 000412b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 000412b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 000412c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 000412c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 000412d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 000412d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 000412e0:·3e52·656d·6564·6961·7469·6f6e·20 | 000412e0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 000412f0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 00041300:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00041310:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00041320:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00041330:·6d36·3836·3622·3e3c·7461·626c·6520·636c··m6866"><table·cl | |||
| 00041340:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00041350:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00041360:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00041370:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00041380:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00041390:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 000413a0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 000413b0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 000413c0:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 000413d0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 000413e0:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 000413f0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 000412f0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 00041300:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00041310:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00041320:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00041330:·2269·646d·3638·3636·223e·3c74·6162·6c65··"idm6866"><table | |||
| 00041340:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00041350:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00041360:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00041370:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00041380:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00041390:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000413a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 000413b0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 000413c0:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 000413d0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 000413e0:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 000413f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00041400:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00041410:·3e64·6973·6162·6c65·3c2f·7464·3e3c·2f74··>disable</td></t | |||
| 00041420:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00041430:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 00041440:·7572·6520·6b65·726e·656c·206d·6f64·756c··ure·kernel·modul | |||
| 00041450:·6520·2772·6473·2720·6973·2064·6973·6162··e·'rds'·is·disab | |||
| 00041460:·6c65·640a·2020·6c69·6e65·696e·6669·6c65··led.··lineinfile | |||
| 00041470:·3a0a·2020·2020·6372·6561·7465·3a20·7472··:.····create:·tr | |||
| 00041480:·7565·0a20·2020·2064·6573·743a·202f·6574··ue.····dest:·/et | |||
| 00041490:·632f·6d6f·6470·726f·6265·2e64·2f72·6473··c/modprobe.d/rds | |||
| 000414a0:·2e63·6f6e·660a·2020·2020·7265·6765·7870··.conf.····regexp | |||
| 000414b0:·3a20·696e·7374·616c·6c5c·732b·7264·730a··:·install\s+rds. | |||
| 000414c0:·2020·2020·6c69·6e65·3a20·696e·7374·616c······line:·instal | |||
| 000414d0:·6c20·7264·7320·2f62·696e·2f66·616c·7365··l·rds·/bin/false | |||
| 000414e0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 000414f0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 00041500:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 00041510:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 00041520:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 00041530:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 00041540:·2074·6167·733a·0a20·202d·204e·4953·542d···tags:.··-·NIST- | |||
| 00041550:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 00041560:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 00041570:·4d2d·3728·6129·0a20·202d·204e·4953·542d··M-7(a).··-·NIST- | |||
| 00041580:·3830·302d·3533·2d43·4d2d·3728·6229·0a20··800-53-CM-7(b).· | |||
| 00041590:·202d·2064·6973·6162·6c65·5f73·7472·6174···-·disable_strat | |||
| 000415a0:·6567·790a·2020·2d20·6b65·726e·656c·5f6d··egy.··-·kernel_m | |||
| 000415b0:·6f64·756c·655f·7264·735f·6469·7361·626c··odule_rds_disabl | |||
| 000415c0:·6564·0a20·202d·206c·6f77·5f63·6f6d·706c··ed.··-·low_compl | |||
| 000415d0:·6578·6974·790a·2020·2d20·6c6f·775f·7365··exity.··-·low_se | |||
| 000415e0:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | |||
| 000415f0:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | |||
| 00041600:·2072·6562·6f6f·745f·7265·7175·6972·6564···reboot_required | |||
| 00041610:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 00041620:·206b·6572·6e65·6c20·6d6f·6475·6c65·2027···kernel·module·' | |||
| 00041630:·7264·7327·2069·7320·626c·6163·6b6c·6973··rds'·is·blacklis | |||
| 00041640:·7465·640a·2020·6c69·6e65·696e·6669·6c65··ted.··lineinfile | |||
| 00041650:·3a0a·2020·2020·6372·6561·7465·3a20·7472··:.····create:·tr | |||
| 00041660:·7565·0a20·2020·2064·6573·743a·202f·6574··ue.····dest:·/et | |||
| 00041670:·632f·6d6f·6470·726f·6265·2e64·2f72·6473··c/modprobe.d/rds | |||
| 00041680:·2e63·6f6e·660a·2020·2020·7265·6765·7870··.conf.····regexp | |||
| 00041690:·3a20·5e62·6c61·636b·6c69·7374·2072·6473··:·^blacklist·rds | |||
| 000416a0:·240a·2020·2020·6c69·6e65·3a20·626c·6163··$.····line:·blac | |||
| 000416b0:·6b6c·6973·7420·7264·730a·2020·7768·656e··klist·rds.··when | |||
| 000416c0:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 000416d0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 000416e0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 000416f0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 00041700:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 00041710:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 00041720:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 00041730:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 00041740:·2d38·3030·2d35·332d·434d·2d37·2861·290a··-800-53-CM-7(a). | |||
| 00041750:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 00041760:·434d·2d37·2862·290a·2020·2d20·6469·7361··CM-7(b).··-·disa | |||
| 00041770:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 00041780:·206b·6572·6e65·6c5f·6d6f·6475·6c65·5f72···kernel_module_r | |||
| 00041790:·6473·5f64·6973·6162·6c65·640a·2020·2d20··ds_disabled.··-· | |||
| 000417a0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 000417b0:·202d·206c·6f77·5f73·6576·6572·6974·790a···-·low_severity. | |||
| 000417c0:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | |||
| 000417d0:·7074·696f·6e0a·2020·2d20·7265·626f·6f74··ption.··-·reboot | |||
| 000417e0:·5f72·6571·7569·7265·640a·3c2f·636f·6465··_required.</code | |||
| 000417f0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00041800:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00041810:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00041820:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00041830:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00041840:·3638·3637·2220·7461·6269·6e64·6578·3d22··6867"·tabindex=" | |||
| Max diff block lines reached; 1651084/1674046 bytes (98.63%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·18.04·LTS·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·18.04·LTS·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 48 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 51 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| Offset 302, 14 lines modified | Offset 302, 37 lines modified | ||
| 302 | ···························SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR | 302 | ···························SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR |
| 303 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR | 303 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR |
| 304 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 304 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 306 | ···························A.9.1.2 | 306 | ···························A.9.1.2 |
| 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 314 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 315 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 316 | if·LC_ALL=C·grep·-q·-m·1·"^install·rds"·/etc/modprobe.d/rds.conf·;·then | ||
| 317 | » | ||
| 318 | » sed·-i·'s#^install·rds.*#install·rds·/bin/false#g'·/etc/modprobe.d/rds.conf | ||
| 319 | else | ||
| 320 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/rds.conf | ||
| 321 | » echo·"install·rds·/bin/false"·>>·/etc/modprobe.d/rds.conf | ||
| 322 | fi | ||
| 323 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·rds$"·/etc/modprobe.d/rds.conf·;·then | ||
| 324 | » echo·"blacklist·rds"·>>·/etc/modprobe.d/rds.conf | ||
| 325 | fi | ||
| 326 | else | ||
| 327 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 328 | fi | ||
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 314 | -·name:·Ensure·kernel·module·'rds'·is·disabled | 334 | -·name:·Ensure·kernel·module·'rds'·is·disabled |
| 315 | ··lineinfile: | 335 | ··lineinfile: |
| Offset 344, 37 lines modified | Offset 367, 14 lines modified | ||
| 344 | ··-·NIST-800-53-CM-7(b) | 367 | ··-·NIST-800-53-CM-7(b) |
| 345 | ··-·disable_strategy | 368 | ··-·disable_strategy |
| 346 | ··-·kernel_module_rds_disabled | 369 | ··-·kernel_module_rds_disabled |
| 347 | ··-·low_complexity | 370 | ··-·low_complexity |
| 348 | ··-·low_severity | 371 | ··-·low_severity |
| 349 | ··-·medium_disruption | 372 | ··-·medium_disruption |
| 350 | ··-·reboot_required | 373 | ··-·reboot_required |
| 351 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 352 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 353 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 354 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 355 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 356 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 357 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 358 | if·LC_ALL=C·grep·-q·-m·1·"^install·rds"·/etc/modprobe.d/rds.conf·;·then | ||
| 359 | » | ||
| 360 | » sed·-i·'s#^install·rds.*#install·rds·/bin/false#g'·/etc/modprobe.d/rds.conf | ||
| 361 | else | ||
| 362 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/rds.conf | ||
| 363 | » echo·"install·rds·/bin/false"·>>·/etc/modprobe.d/rds.conf | ||
| 364 | fi | ||
| 365 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·rds$"·/etc/modprobe.d/rds.conf·;·then | ||
| 366 | » echo·"blacklist·rds"·>>·/etc/modprobe.d/rds.conf | ||
| 367 | fi | ||
| 368 | else | ||
| 369 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 370 | fi | ||
| 371 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·T\x8TI\x8IP\x8PC\x8C·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8t·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 374 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·T\x8TI\x8IP\x8PC\x8C·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8t·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 372 | The·Transparent·Inter-Process·Communication·(TIPC)·protocol·is·designed·to·provide | 375 | The·Transparent·Inter-Process·Communication·(TIPC)·protocol·is·designed·to·provide |
| 373 | communications·between·nodes·in·a·cluster.·To·configure·the·system·to·prevent·the·tipc | 376 | communications·between·nodes·in·a·cluster.·To·configure·the·system·to·prevent·the·tipc |
| 374 | kernel·module·from·being·loaded,·add·the·following·line·to·the·file·/etc/modprobe.d/ | 377 | kernel·module·from·being·loaded,·add·the·following·line·to·the·file·/etc/modprobe.d/ |
| 375 | tipc.conf: | 378 | tipc.conf: |
| 376 | install·tipc·/bin/false | 379 | install·tipc·/bin/false |
| 377 | Warning: ·This·configuration·baseline·was·created·to·deploy·the·base·operating·system·for | 380 | Warning: ·This·configuration·baseline·was·created·to·deploy·the·base·operating·system·for |
| Offset 399, 14 lines modified | Offset 399, 37 lines modified | ||
| 399 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 399 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 400 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 400 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 401 | ···························A.9.1.2 | 401 | ···························A.9.1.2 |
| 402 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 402 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 403 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 403 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 404 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 404 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 405 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000095-GPOS-00049 | 405 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000095-GPOS-00049 |
| 406 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 407 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 408 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 409 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 410 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 411 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 412 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 413 | if·LC_ALL=C·grep·-q·-m·1·"^install·tipc"·/etc/modprobe.d/tipc.conf·;·then | ||
| 414 | » | ||
| 415 | » sed·-i·'s#^install·tipc.*#install·tipc·/bin/false#g'·/etc/modprobe.d/tipc.conf | ||
| 416 | else | ||
| 417 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/tipc.conf | ||
| 418 | » echo·"install·tipc·/bin/false"·>>·/etc/modprobe.d/tipc.conf | ||
| 419 | fi | ||
| 420 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·tipc$"·/etc/modprobe.d/tipc.conf·;·then | ||
| 421 | » echo·"blacklist·tipc"·>>·/etc/modprobe.d/tipc.conf | ||
| 422 | fi | ||
| 423 | else | ||
| 424 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 425 | fi | ||
| 406 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 426 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 407 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 427 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 408 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 428 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 409 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 429 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 410 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 430 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| Max diff block lines reached; 208423/214485 bytes (97.17%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·342d·3131·2d30·3 | 00037d60:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16256, 741 lines modified | Offset 16256, 741 lines modified | ||
| 0003f7f0:·2d74·6172·6765·743d·2223·6964·6d35·3137··-target="#idm517 | 0003f7f0:·2d74·6172·6765·743d·2223·6964·6d35·3137··-target="#idm517 | ||
| 0003f800:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003f800:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003f810:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003f810:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003f820:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003f820:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003f830:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003f830:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003f840:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003f840:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (727 lines added, 727 lines removed) | |
| 0003f850:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003f850:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003f860:·7469·6f6e·20 | 0003f860:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003f870:·7 | 0003f870:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003f880:· | 0003f880:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003f890:·6 | 0003f890:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003f8a0:· | 0003f8a0:·2220·6964·3d22·6964·6d35·3137·3222·3e3c··"·id="idm5172">< | ||
| 0003f8b0:·2 | 0003f8b0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003f8c0:· | 0003f8c0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003f8d0:· | 0003f8d0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0003f8e0:· | 0003f8e0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0003f8f0:·6 | 0003f8f0:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | ||
| 0003f900:·6 | 0003f900:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | ||
| 0003f910:· | 0003f910:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | ||
| 0003f920:· | 0003f920:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | ||
| 0003f930:· | 0003f930:·7468·656e·0a0a·2320·4c69·7374·206f·6620··then..#·List·of· | ||
| 0003f940:· | 0003f940:·6c6f·6720·6669·6c65·2070·6174·6873·2074··log·file·paths·t | ||
| 0003f950:· | 0003f950:·6f20·6265·2069·6e73·7065·6374·6564·2066··o·be·inspected·f | ||
| 0003f960:· | 0003f960:·6f72·2063·6f72·7265·6374·2070·6572·6d69··or·correct·permi | ||
| 0003f970:· | 0003f970:·7373·696f·6e73·0a23·202a·2050·7269·6d61··ssions.#·*·Prima | ||
| 0003f980:· | 0003f980:·7269·6c79·2069·6e73·7065·6374·206c·6f67··rily·inspect·log | ||
| 0003f990:· | 0003f990:·2066·696c·6520·7061·7468·7320·6c69·7374···file·paths·list | ||
| 0003f9a0:·6 | 0003f9a0:·6564·2069·6e20·2f65·7463·2f72·7379·736c··ed·in·/etc/rsysl | ||
| 0003f9b0:· | 0003f9b0:·6f67·2e63·6f6e·660a·5253·5953·4c4f·475f··og.conf.RSYSLOG_ | ||
| 0003f9c0:· | 0003f9c0:·4554·435f·434f·4e46·4947·3d22·2f65·7463··ETC_CONFIG="/etc | ||
| 0003f9d0:· | 0003f9d0:·2f72·7379·736c·6f67·2e63·6f6e·6622·0a23··/rsyslog.conf".# | ||
| 0003f9e0:· | 0003f9e0:·202a·2041·6e64·2061·6c73·6f20·7468·6520···*·And·also·the· | ||
| 0003f9f0:· | 0003f9f0:·6c6f·6720·6669·6c65·2070·6174·6873·206c··log·file·paths·l | ||
| 0003fa00:·6 | 0003fa00:·6973·7465·6420·6166·7465·7220·7273·7973··isted·after·rsys | ||
| 0003fa10:·6 | 0003fa10:·6c6f·6727·7320·2449·6e63·6c75·6465·436f··log's·$IncludeCo | ||
| 0003fa20:·6 | 0003fa20:·6e66·6967·2064·6972·6563·7469·7665·0a23··nfig·directive.# | ||
| 0003fa30:· | 0003fa30:·2020·2028·7374·6f72·6520·7468·6520·7265·····(store·the·re | ||
| 0003fa40:· | 0003fa40:·7375·6c74·2069·6e74·6f20·6172·7261·7920··sult·into·array· | ||
| 0003fa50:· | 0003fa50:·666f·7220·7468·6520·6361·7365·2074·6865··for·the·case·the | ||
| 0003fa60:· | 0003fa60:·7265·2773·2073·6865·6c6c·2067·6c6f·6220··re's·shell·glob· | ||
| 0003fa70:·75 | 0003fa70:·7573·6564·2061·7320·7661·6c75·6520·6f66··used·as·value·of | ||
| 0003fa80:· | 0003fa80:·2049·6e63·6c75·6465·436f·6e66·6967·290a···IncludeConfig). | ||
| 0003fa90:· | 0003fa90:·7265·6164·6172·7261·7920·2d74·204f·4c44··readarray·-t·OLD | ||
| 0003faa0:· | 0003faa0:·5f49·4e43·2026·6c74·3b20·266c·743b·2867··_INC·<·<(g | ||
| 0003fab0:· | 0003fab0:·7265·7020·2d65·2022·5c24·496e·636c·7564··rep·-e·"\$Includ | ||
| 0003fac0:· | 0003fac0:·6543·6f6e·6669·675b·5b3a·7370·6163·653a··eConfig[[:space: | ||
| 0003fad0:· | 0003fad0:·5d5d·5c2b·5b5e·5b3a·7370·6163·653a·5d3b··]]\+[^[:space:]; | ||
| 0003fae0:·5 | 0003fae0:·5d5c·2b22·202f·6574·632f·7273·7973·6c6f··]\+"·/etc/rsyslo | ||
| 0003faf0:· | 0003faf0:·672e·636f·6e66·207c·2063·7574·202d·6420··g.conf·|·cut·-d· | ||
| 0003fb00:· | 0003fb00:·2720·2720·2d66·2032·290a·7265·6164·6172··'·'·-f·2).readar | ||
| 0003fb10:· | 0003fb10:·7261·7920·2d74·2052·5359·534c·4f47·5f49··ray·-t·RSYSLOG_I | ||
| 0003fb20:· | 0003fb20:·4e43·4c55·4445·5f43·4f4e·4649·4720·266c··NCLUDE_CONFIG·&l | ||
| 0003fb30:· | 0003fb30:·743b·2026·6c74·3b28·666f·7220·494e·4350··t;·<(for·INCP | ||
| 0003fb40:· | 0003fb40:·4154·4820·696e·2022·247b·4f4c·445f·494e··ATH·in·"${OLD_IN | ||
| 0003fb50:· | 0003fb50:·435b·405d·7d22·3b20·646f·2065·7661·6c20··C[@]}";·do·eval· | ||
| 0003fb60:· | 0003fb60:·7072·696e·7466·2027·2573·5c5c·6e27·2022··printf·'%s\\n'·" | ||
| 0003fb70:· | 0003fb70:·247b·494e·4350·4154·487d·223b·2064·6f6e··${INCPATH}";·don | ||
| 0003fb80:· | 0003fb80:·6529·0a72·6561·6461·7272·6179·202d·7420··e).readarray·-t· | ||
| 0003fb90:· | 0003fb90:·4e45·575f·494e·4320·266c·743b·2026·6c74··NEW_INC·<·< | ||
| 0003fba0:· | 0003fba0:·3b28·7365·6420·2d6e·2027·2f5e·5c73·2a69··;(sed·-n·'/^\s*i | ||
| 0003fbb0:·6 | 0003fbb0:·6e63·6c75·6465·282f·2c2f·292f·4970·2720··nclude(/,/)/Ip'· | ||
| 0003fbc0:·2 | 0003fbc0:·2f65·7463·2f72·7379·736c·6f67·2e63·6f6e··/etc/rsyslog.con | ||
| 0003fbd0:·6 | 0003fbd0:·6620·7c20·7365·6420·2d6e·2027·7340·2e2a··f·|·sed·-n·'s@.* | ||
| 0003fbe0:·6 | 0003fbe0:·6669·6c65·5c73·2a3d·5c73·2a22·5c28·5b2f··file\s*=\s*"\([/ | ||
| 0003fbf0:· | 0003fbf0:·5b3a·616c·6e75·6d3a·5d5b·3a70·756e·6374··[:alnum:][:punct | ||
| 0003fc00:· | 0003fc00:·3a5d·5d2a·5c29·222e·2a40·5c31·4049·7027··:]]*\)".*@\1@Ip' | ||
| 0003fc10:· | 0003fc10:·290a·7265·6164·6172·7261·7920·2d74·2052··).readarray·-t·R | ||
| 0003fc20:· | 0003fc20:·5359·534c·4f47·5f49·4e43·4c55·4445·2026··SYSLOG_INCLUDE·& | ||
| 0003fc30:· | 0003fc30:·6c74·3b20·266c·743b·2866·6f72·2049·4e43··lt;·<(for·INC | ||
| 0003fc40:· | 0003fc40:·5041·5448·2069·6e20·2224·7b4e·4557·5f49··PATH·in·"${NEW_I | ||
| 0003fc50:· | 0003fc50:·4e43·5b40·5d7d·223b·2064·6f20·6576·616c··NC[@]}";·do·eval | ||
| 0003fc60:·2 | 0003fc60:·2070·7269·6e74·6620·2725·735c·5c6e·2720···printf·'%s\\n'· | ||
| 0003fc70:· | 0003fc70:·2224·7b49·4e43·5041·5448·7d22·3b20·646f··"${INCPATH}";·do | ||
| 0003fc80:· | 0003fc80:·6e65·290a·0a23·2044·6563·6c61·7265·2061··ne)..#·Declare·a | ||
| 0003fc90:· | 0003fc90:·6e20·6172·7261·7920·746f·2068·6f6c·6420··n·array·to·hold· | ||
| 0003fca0:· | 0003fca0:·7468·6520·6669·6e61·6c20·6c69·7374·206f··the·final·list·o | ||
| 0003fcb0:· | 0003fcb0:·6620·6469·6666·6572·656e·7420·6c6f·6720··f·different·log· | ||
| 0003fcc0:· | 0003fcc0:·6669·6c65·2070·6174·6873·0a64·6563·6c61··file·paths.decla | ||
| 0003fcd0:· | 0003fcd0:·7265·202d·6120·4c4f·475f·4649·4c45·5f50··re·-a·LOG_FILE_P | ||
| 0003fce0:· | 0003fce0:·4154·4853·0a0a·2320·4172·7261·7920·746f··ATHS..#·Array·to | ||
| 0003fcf0:· | 0003fcf0:·2068·6f6c·6420·616c·6c20·7273·7973·6c6f···hold·all·rsyslo | ||
| 0003fd00:·6 | 0003fd00:·6720·636f·6e66·6967·2065·6e74·7269·6573··g·config·entries | ||
| 0003fd10:· | 0003fd10:·0a52·5359·534c·4f47·5f43·4f4e·4649·4753··.RSYSLOG_CONFIGS | ||
| 0003fd20:· | 0003fd20:·3d28·290a·5253·5953·4c4f·475f·434f·4e46··=().RSYSLOG_CONF | ||
| 0003fd30:· | 0003fd30:·4947·533d·2822·247b·5253·5953·4c4f·475f··IGS=("${RSYSLOG_ | ||
| 0003fd40:· | 0003fd40:·4554·435f·434f·4e46·4947·7d22·2022·247b··ETC_CONFIG}"·"${ | ||
| 0003fd50:· | 0003fd50:·5253·5953·4c4f·475f·494e·434c·5544·455f··RSYSLOG_INCLUDE_ | ||
| 0003fd60:· | 0003fd60:·434f·4e46·4947·5b40·5d7d·2220·2224·7b52··CONFIG[@]}"·"${R | ||
| 0003fd70:·35 | 0003fd70:·5359·534c·4f47·5f49·4e43·4c55·4445·5b40··SYSLOG_INCLUDE[@ | ||
| 0003fd80:·5 | 0003fd80:·5d7d·2229·0a0a·2320·4765·7420·6675·6c6c··]}")..#·Get·full | ||
| 0003fd90:· | 0003fd90:·206c·6973·7420·6f66·2066·696c·6573·2074···list·of·files·t | ||
| 0003fda0:· | 0003fda0:·6f20·6265·2063·6865·636b·6564·0a23·2052··o·be·checked.#·R | ||
| 0003fdb0:· | 0003fdb0:·5359·534c·4f47·5f43·4f4e·4649·4753·206d··SYSLOG_CONFIGS·m | ||
| 0003fdc0:·6 | 0003fdc0:·6179·2063·6f6e·7461·696e·2067·6c6f·6273··ay·contain·globs | ||
| 0003fdd0:· | 0003fdd0:·2073·7563·6820·6173·0a23·202f·6574·632f···such·as.#·/etc/ | ||
| 0003fde0:· | 0003fde0:·7273·7973·6c6f·672e·642f·2a2e·636f·6e66··rsyslog.d/*.conf | ||
| 0003fdf0:·6 | 0003fdf0:·202f·6574·632f·7273·7973·6c6f·672e·642f···/etc/rsyslog.d/ | ||
| 0003fe00:· | 0003fe00:·2a2e·6672·756c·650a·2320·536f·2c20·6c6f··*.frule.#·So,·lo | ||
| 0003fe10:· | 0003fe10:·6f70·206f·7665·7220·7468·6520·656e·7472··op·over·the·entr | ||
| 0003fe20:·6 | 0003fe20:·6965·7320·696e·2052·5359·534c·4f47·5f43··ies·in·RSYSLOG_C | ||
| 0003fe30:· | 0003fe30:·4f4e·4649·4753·2061·6e64·2075·7365·2066··ONFIGS·and·use·f | ||
| 0003fe40:·6 | 0003fe40:·696e·6420·746f·2067·6574·2074·6865·206c··ind·to·get·the·l | ||
| 0003fe50:· | 0003fe50:·6973·7420·6f66·2069·6e63·6c75·6465·6420··ist·of·included· | ||
| 0003fe60:· | 0003fe60:·6669·6c65·732e·0a52·5359·534c·4f47·5f43··files..RSYSLOG_C | ||
| 0003fe70:· | 0003fe70:·4f4e·4649·475f·4649·4c45·533d·2829·0a66··ONFIG_FILES=().f | ||
| 0003fe80:· | 0003fe80:·6f72·2045·4e54·5259·2069·6e20·2224·7b52··or·ENTRY·in·"${R | ||
| 0003fe90:· | 0003fe90:·5359·534c·4f47·5f43·4f4e·4649·4753·5b40··SYSLOG_CONFIGS[@ | ||
| 0003fea0:· | 0003fea0:·5d7d·220a·646f·0a09·2320·4966·2064·6972··]}".do..#·If·dir | ||
| 0003feb0:· | 0003feb0:·6563·746f·7279·2c20·7273·7973·6c6f·6720··ectory,·rsyslog· | ||
| 0003fec0:· | 0003fec0:·7769·6c6c·2073·6561·7263·6820·666f·7220··will·search·for· | ||
| Max diff block lines reached; 1002571/1104607 bytes (90.76%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·18.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·18.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 264, 14 lines modified | Offset 264, 139 lines modified | ||
| 264 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 264 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 265 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 265 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 266 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 266 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 267 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 267 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 268 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 268 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 269 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 269 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 | 270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 |
| 271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 272 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 273 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 274 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 275 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 276 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 277 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 278 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 279 | of·IncludeConfig) | ||
| 280 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 281 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 282 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 283 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 284 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 285 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 286 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 287 | '%s\\n'·"${INCPATH}";·done) | ||
| 288 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 289 | declare·-a·LOG_FILE_PATHS | ||
| 290 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 291 | RSYSLOG_CONFIGS=() | ||
| 292 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 293 | {RSYSLOG_INCLUDE[@]}") | ||
| 294 | #·Get·full·list·of·files·to·be·checked | ||
| 295 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 296 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 297 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 298 | included·files. | ||
| 299 | RSYSLOG_CONFIG_FILES=() | ||
| 300 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 301 | do | ||
| 302 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 303 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 304 | » if·[·-d·"${ENTRY}"·] | ||
| 305 | » then | ||
| 306 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 307 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 308 | » elif·[·-f·"${ENTRY}"·] | ||
| 309 | » then | ||
| 310 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 311 | » else | ||
| 312 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 313 | » fi | ||
| 314 | done | ||
| 315 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 316 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 317 | configuration) | ||
| 318 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 319 | do | ||
| 320 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 321 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 322 | ('$')·characters, | ||
| 323 | » #·*·Ignore·empty·lines, | ||
| 324 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 325 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 326 | not·log·files | ||
| 327 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 328 | path | ||
| 329 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 330 | all·of·the | ||
| 331 | » #·following·are·met: | ||
| 332 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 333 | » #·*·it·is·preceded·by·space | ||
| 334 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 335 | characters | ||
| 336 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 337 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 338 | » then | ||
| 339 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 340 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 341 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 342 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 343 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 344 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 345 | {FILTERED_PATHS}") | ||
| 346 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 347 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 348 | newline),·split | ||
| 349 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 350 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 351 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 352 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 353 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 354 | » » #·Delete·the·temporary·array | ||
| 355 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 356 | » fi | ||
| 357 | done | ||
| 358 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 359 | grep·regex·is·a·bit | ||
| 360 | #·curly: | ||
| 361 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 362 | #·extract·File="logfile"·expression | ||
| 363 | #·match·only·"logfile"·expression | ||
| 364 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 365 | do | ||
| 366 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 367 | "${LOG_FILE}") | ||
| 368 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| Max diff block lines reached; 132961/139550 bytes (95.28%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d30:·2d31·312d·303 | 00037d30:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15095, 169 lines modified | Offset 15095, 169 lines modified | ||
| 0003af60:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af60:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af70:·2223·6964·6d32·3733·3522·2074·6162·696e··"#idm2735"·tabin | 0003af70:·2223·6964·6d32·3733·3522·2074·6162·696e··"#idm2735"·tabin | ||
| 0003af80:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af80:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af90:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af90:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003afa0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003afa0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003afb0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003afb0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003afc0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003afc0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003afd0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003afd0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | ||
| 0003afe0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003aff0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b000:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b010:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b020:·6964·6d32·3733·3522·3e3c·7461·626c·6520··idm2735"><table· | |||
| 0003b030:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b040:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b050:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b060:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b070:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b080:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b090:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b0a0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003afe0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003aff0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b000:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b010:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b020:·2269·646d·3237·3335·223e·3c74·6162·6c65··"idm2735"><table | |||
| 0003b030:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b040:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b050:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b060:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b070:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b080:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b090:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b0a0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b0b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b0c0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b0d0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b0e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b0f0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b | 0003b0b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b0c0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b110:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b120:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b130:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b140:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b150:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b160:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b170:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b180:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b190:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b1a0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b1b0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b1c0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b1d0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b1e0:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b1f0:·2d53·5449·472d·5542·5455·2d32·302d·3031··-STIG-UBTU-20-01 | |||
| 0003b200:·3034·3530·0a20·202d·204e·4953·542d·3830··0450.··-·NIST-80 | |||
| 0003b210:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b220:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b230:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b240:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b250:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b260:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b270:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b280:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b290:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b2a0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b2b0:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b2c0:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b2d0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b2e0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b2f0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b300:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b310:·6172·6765·743d·2223·6964·6d32·3733·3622··arget="#idm2736" | |||
| 0003b320:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b330:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b340:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b350:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b360:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b370:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b380:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b390:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b3a0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b3b0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b3c0:·2220·6964·3d22·6964·6d32·3733·3622·3e3c··"·id="idm2736">< | |||
| 0003b3d0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b3e0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b3f0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b400:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b410:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b420:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b430:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b440:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b450:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b460:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b470:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b480:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b490:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b | 0003b0d0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b4b0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b | 0003b0e0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b0f0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b100:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b110:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b120:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b130:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b | 0003b140:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | ||
| 0003b150:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b160:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b170:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b4e0:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| Max diff block lines reached; 6024921/6048021 bytes (99.62%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 121, 66 lines modified | Offset 121, 66 lines modified | ||
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 124 | ············_\x8c_\x8i_\x8s············1.4.1 | 124 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | -·name:·Ensure·aide·is·installed | ||
| 134 | ··package: | ||
| 135 | ····name:·aide | ||
| 136 | ····state:·present | ||
| 137 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 138 | ··tags: | ||
| 139 | ··-·CJIS-5.10.1.3 | ||
| 140 | ··-·DISA-STIG-UBTU-20-010450 | ||
| 141 | ··-·NIST-800-53-CM-6(a) | ||
| 142 | ··-·PCI-DSS-Req-11.5 | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | ||
| 144 | ··-·enable_strategy | ||
| 145 | ··-·low_complexity | ||
| 146 | ··-·low_disruption | ||
| 147 | ··-·medium_severity | ||
| 148 | ··-·no_reboot_needed | ||
| 149 | ··-·package_aide_installed | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | include·install_aide | 133 | include·install_aide |
| 156 | class·install_aide·{ | 134 | class·install_aide·{ |
| 157 | ··package·{·'aide': | 135 | ··package·{·'aide': |
| 158 | ····ensure·=>·'installed', | 136 | ····ensure·=>·'installed', |
| 159 | ··} | 137 | ··} |
| 160 | } | 138 | } |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | 144 | #·Remediation·is·applicable·only·in·certain·platforms |
| 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 145 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 172 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 146 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 173 | else | 147 | else |
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 148 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 175 | fi | 149 | fi |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | -·name:·Ensure·aide·is·installed | ||
| 160 | ··package: | ||
| 161 | ····name:·aide | ||
| 162 | ····state:·present | ||
| 163 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 164 | ··tags: | ||
| 165 | ··-·CJIS-5.10.1.3 | ||
| 166 | ··-·DISA-STIG-UBTU-20-010450 | ||
| 167 | ··-·NIST-800-53-CM-6(a) | ||
| 168 | ··-·PCI-DSS-Req-11.5 | ||
| 169 | ··-·PCI-DSSv4-11.5.2 | ||
| 170 | ··-·enable_strategy | ||
| 171 | ··-·low_complexity | ||
| 172 | ··-·low_disruption | ||
| 173 | ··-·medium_severity | ||
| 174 | ··-·no_reboot_needed | ||
| 175 | ··-·package_aide_installed | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 177 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·aideinit | 178 | $·sudo·aideinit |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 181 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 181 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 182 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 182 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 206, 14 lines modified | Offset 206, 40 lines modified | ||
| 206 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 206 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 207 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 207 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 209 | ············_\x8c_\x8i_\x8s············1.4.1 | 209 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 212 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 212 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 214 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 215 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 216 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 217 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 218 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 219 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| Max diff block lines reached; 849427/855508 bytes (99.29%) of diff not shown. | |||
| Offset 14286, 15 lines modified | Offset 14286, 15 lines modified | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d40:·3131·2d30·3 | 00037d40:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15091, 169 lines modified | Offset 15091, 169 lines modified | ||
| 0003af20:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003af20:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003af30:·646d·3237·3335·2220·7461·6269·6e64·6578··dm2735"·tabindex | 0003af30:·646d·3237·3335·2220·7461·6269·6e64·6578··dm2735"·tabindex | ||
| 0003af40:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003af40:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003af50:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003af50:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003af60:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003af60:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003af70:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003af70:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003af80:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003af80:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003af90:·6d65·6469·6174·696f·6e20· | 0003af90:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | ||
| 0003afa0:· | 0003afa0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003afb0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003afc0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003afd0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003afe0:·3237·3335·223e·3c74·6162·6c65·2063·6c61··2735"><table·cla | |||
| 0003aff0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003afb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003afc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003afd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003afe0:·6d32·3733·3522·3e3c·7461·626c·6520·636c··m2735"><table·cl | |||
| 0003aff0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b000:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b0 | 0003b000:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b010:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b020:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b030:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b040:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b050:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b060:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b020:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b030:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b040:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b050:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b060:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b070:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b080:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b090:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b0a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b0b0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b0 | 0003b070:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b080:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b0d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b0e0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b0f0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b100:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b110:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b120:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b130:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b140:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b150:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b160:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b170:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b180:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b190:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b1a0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b1b0:·4947·2d55·4254·552d·3230·2d30·3130·3435··IG-UBTU-20-01045 | |||
| 0003b1c0:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003b1d0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b1e0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b1f0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b200:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b210:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b220:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b230:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b240:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b250:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b260:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b270:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b280:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b290:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b2a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b2b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b2c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b2d0:·6574·3d22·2369·646d·3237·3336·2220·7461··et="#idm2736"·ta | |||
| 0003b2e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b2f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b300:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b310:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b320:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b330:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b340:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b350:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b360:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b370:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b380:·643d·2269·646d·3237·3336·223e·3c74·6162··d="idm2736"><tab | |||
| 0003b390:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b3a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b3b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b3c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b3d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b3e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b3f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b400:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b410:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b420:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b430:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b440:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b450:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b | 0003b090:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b0a0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b0b0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b0c0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b0d0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b0e0:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b0f0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b100:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b110:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b120:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b130:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b470:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b480:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b490:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b4a0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| Max diff block lines reached; 5859459/5882559 bytes (99.61%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 120, 66 lines modified | Offset 120, 66 lines modified | ||
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 123 | ············_\x8c_\x8i_\x8s············1.4.1 | 123 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | -·name:·Ensure·aide·is·installed | ||
| 133 | ··package: | ||
| 134 | ····name:·aide | ||
| 135 | ····state:·present | ||
| 136 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 137 | ··tags: | ||
| 138 | ··-·CJIS-5.10.1.3 | ||
| 139 | ··-·DISA-STIG-UBTU-20-010450 | ||
| 140 | ··-·NIST-800-53-CM-6(a) | ||
| 141 | ··-·PCI-DSS-Req-11.5 | ||
| 142 | ··-·PCI-DSSv4-11.5.2 | ||
| 143 | ··-·enable_strategy | ||
| 144 | ··-·low_complexity | ||
| 145 | ··-·low_disruption | ||
| 146 | ··-·medium_severity | ||
| 147 | ··-·no_reboot_needed | ||
| 148 | ··-·package_aide_installed | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | include·install_aide | 132 | include·install_aide |
| 155 | class·install_aide·{ | 133 | class·install_aide·{ |
| 156 | ··package·{·'aide': | 134 | ··package·{·'aide': |
| 157 | ····ensure·=>·'installed', | 135 | ····ensure·=>·'installed', |
| 158 | ··} | 136 | ··} |
| 159 | } | 137 | } |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 169 | #·Remediation·is·applicable·only·in·certain·platforms | 143 | #·Remediation·is·applicable·only·in·certain·platforms |
| 170 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 144 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 171 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 145 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 172 | else | 146 | else |
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 174 | fi | 148 | fi |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | [[packages]] | ||
| 151 | name·=·"aide" | ||
| 152 | version·=·"*" | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | -·name:·Ensure·aide·is·installed | ||
| 159 | ··package: | ||
| 160 | ····name:·aide | ||
| 161 | ····state:·present | ||
| 162 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 163 | ··tags: | ||
| 164 | ··-·CJIS-5.10.1.3 | ||
| 165 | ··-·DISA-STIG-UBTU-20-010450 | ||
| 166 | ··-·NIST-800-53-CM-6(a) | ||
| 167 | ··-·PCI-DSS-Req-11.5 | ||
| 168 | ··-·PCI-DSSv4-11.5.2 | ||
| 169 | ··-·enable_strategy | ||
| 170 | ··-·low_complexity | ||
| 171 | ··-·low_disruption | ||
| 172 | ··-·medium_severity | ||
| 173 | ··-·no_reboot_needed | ||
| 174 | ··-·package_aide_installed | ||
| 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 176 | Run·the·following·command·to·generate·a·new·database: | 176 | Run·the·following·command·to·generate·a·new·database: |
| 177 | $·sudo·aideinit | 177 | $·sudo·aideinit |
| 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 179 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 179 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 180 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 180 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 181 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 181 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 205, 14 lines modified | Offset 205, 40 lines modified | ||
| 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 208 | ············_\x8c_\x8i_\x8s············1.4.1 | 208 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 209 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 209 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 210 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 210 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 211 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 211 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 213 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 214 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 215 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 216 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 217 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 218 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| Max diff block lines reached; 831373/837464 bytes (99.27%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d30:·2d31·312d·303 | 00037d30:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15118, 168 lines modified | Offset 15118, 168 lines modified | ||
| 0003b0d0:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | 0003b0d0:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | ||
| 0003b0e0:·3335·2220·7461·6269·6e64·6578·3d22·3022··35"·tabindex="0" | 0003b0e0:·3335·2220·7461·6269·6e64·6578·3d22·3022··35"·tabindex="0" | ||
| 0003b0f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b0f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b100:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b100:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b110:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b110:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b120:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b120:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b130:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b130:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b140:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b150:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b160:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b170:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b180:·7073·6522·2069·643d·2269·646d·3237·3335··pse"·id="idm2735 | |||
| 0003b190:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b1a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b140:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b150:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b160:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b170:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b180:·6170·7365·2220·6964·3d22·6964·6d32·3733··apse"·id="idm273 | |||
| 0003b190:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003b1a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b1b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b1 | 0003b1b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b1c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b1d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b1e0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b1f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b200:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b210:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b220:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b230:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b1d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b1e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b1f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b200:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b210:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b220:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b230:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b240:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b250:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b260:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b270:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b280:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b290:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b2a0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b2b0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b2c0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b2d0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b2e0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b2f0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b300:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b310:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b320:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b330:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b340:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b350:·0a20·202d·2044·4953·412d·5354·4947·2d55··.··-·DISA-STIG-U | |||
| 0003b360:·4254·552d·3230·2d30·3130·3435·300a·2020··BTU-20-010450.·· | |||
| 0003b370:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b380:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b390:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b3a0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b3b0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b3c0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b3d0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b3e0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b3f0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b400:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b410:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b420:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b430:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b440:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b450:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b460:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b470:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b480:·2369·646d·3237·3336·2220·7461·6269·6e64··#idm2736"·tabind | |||
| 0003b490:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b4a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b4b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b4c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b4d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b4e0:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003b4f0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b500:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b510:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b520:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b530:·646d·3237·3336·223e·3c74·6162·6c65·2063··dm2736"><table·c | |||
| 0003b540:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b550:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b560:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b570:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b580:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b590:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b5a0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b5b0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b5c0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b5d0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b5e0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b5f0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b600:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b | 0003b240:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b250:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b260:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b270:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b280:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b290:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b2a0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b2b0:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b2c0:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b2d0:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b2e0:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b620:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| Max diff block lines reached; 19090565/19113527 bytes (99.88%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 124, 66 lines modified | Offset 124, 66 lines modified | ||
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 127 | ············_\x8c_\x8i_\x8s············1.4.1 | 127 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 130 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | -·name:·Ensure·aide·is·installed | ||
| 137 | ··package: | ||
| 138 | ····name:·aide | ||
| 139 | ····state:·present | ||
| 140 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 141 | ··tags: | ||
| 142 | ··-·CJIS-5.10.1.3 | ||
| 143 | ··-·DISA-STIG-UBTU-20-010450 | ||
| 144 | ··-·NIST-800-53-CM-6(a) | ||
| 145 | ··-·PCI-DSS-Req-11.5 | ||
| 146 | ··-·PCI-DSSv4-11.5.2 | ||
| 147 | ··-·enable_strategy | ||
| 148 | ··-·low_complexity | ||
| 149 | ··-·low_disruption | ||
| 150 | ··-·medium_severity | ||
| 151 | ··-·no_reboot_needed | ||
| 152 | ··-·package_aide_installed | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | include·install_aide | 136 | include·install_aide |
| 159 | class·install_aide·{ | 137 | class·install_aide·{ |
| 160 | ··package·{·'aide': | 138 | ··package·{·'aide': |
| 161 | ····ensure·=>·'installed', | 139 | ····ensure·=>·'installed', |
| 162 | ··} | 140 | ··} |
| 163 | } | 141 | } |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | [[packages]] | ||
| 166 | name·=·"aide" | ||
| 167 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | 147 | #·Remediation·is·applicable·only·in·certain·platforms |
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 148 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 175 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 149 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 176 | else | 150 | else |
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 178 | fi | 152 | fi |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | -·name:·Ensure·aide·is·installed | ||
| 163 | ··package: | ||
| 164 | ····name:·aide | ||
| 165 | ····state:·present | ||
| 166 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 167 | ··tags: | ||
| 168 | ··-·CJIS-5.10.1.3 | ||
| 169 | ··-·DISA-STIG-UBTU-20-010450 | ||
| 170 | ··-·NIST-800-53-CM-6(a) | ||
| 171 | ··-·PCI-DSS-Req-11.5 | ||
| 172 | ··-·PCI-DSSv4-11.5.2 | ||
| 173 | ··-·enable_strategy | ||
| 174 | ··-·low_complexity | ||
| 175 | ··-·low_disruption | ||
| 176 | ··-·medium_severity | ||
| 177 | ··-·no_reboot_needed | ||
| 178 | ··-·package_aide_installed | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·aideinit | 181 | $·sudo·aideinit |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 184 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 184 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 185 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 209, 14 lines modified | Offset 209, 40 lines modified | ||
| 209 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 209 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 210 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 210 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 211 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 211 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 212 | ············_\x8c_\x8i_\x8s············1.4.1 | 212 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 213 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 213 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 214 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 214 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 215 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 215 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 219 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 220 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 221 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 222 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| Max diff block lines reached; 1760984/1767065 bytes (99.66%) of diff not shown. | |||
| Offset 14286, 15 lines modified | Offset 14286, 15 lines modified | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d40:·3131·2d30·3 | 00037d40:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15114, 168 lines modified | Offset 15114, 168 lines modified | ||
| 0003b090:·7267·6574·3d22·2369·646d·3237·3335·2220··rget="#idm2735"· | 0003b090:·7267·6574·3d22·2369·646d·3237·3335·2220··rget="#idm2735"· | ||
| 0003b0a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b0a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b0b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b0b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b0c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b0c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b0d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b0d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b0e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b0e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b0f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b0f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b100:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b110:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b120:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b130:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b140:·2069·643d·2269·646d·3237·3335·223e·3c74···id="idm2735"><t | |||
| 0003b150:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b160:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b100:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b110:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b120:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b130:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b140:·2220·6964·3d22·6964·6d32·3733·3522·3e3c··"·id="idm2735">< | |||
| 0003b150:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b160:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b170:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b1 | 0003b170:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b180:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b190:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b1a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b190:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b1a0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b1b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1c0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b1d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b1e0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b1f0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b200:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b210:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b220:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b230:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b240:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b250:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b260:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b270:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b280:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b290:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b2a0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b2b0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b2c0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b2d0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b2e0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b2f0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b300:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b310:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b320:·3230·2d30·3130·3435·300a·2020·2d20·4e49··20-010450.··-·NI | |||
| 0003b330:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b340:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b350:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b360:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b370:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b380:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b390:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b3a0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b3b0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b3c0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b3d0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b3e0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b3f0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b400:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b410:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b420:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b430:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b440:·3237·3336·2220·7461·6269·6e64·6578·3d22··2736"·tabindex=" | |||
| 0003b450:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b460:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b470:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b480:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b490:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b4a0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b4b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b4c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b4d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b4e0:·6c61·7073·6522·2069·643d·2269·646d·3237··lapse"·id="idm27 | |||
| 0003b4f0:·3336·223e·3c74·6162·6c65·2063·6c61·7373··36"><table·class | |||
| 0003b500:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b510:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b520:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b530:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b540:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b550:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b560:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b570:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b580:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b590:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b5a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b5b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b5c0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b | 0003b1b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b1c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b1d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b1e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b1f0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b200:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b210:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b220:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b230:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b240:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b250:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b | 0003b260:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | ||
| 0003b270:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b280:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b290:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b2a0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b600:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| Max diff block lines reached; 19049117/19072079 bytes (99.88%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 123, 66 lines modified | Offset 123, 66 lines modified | ||
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 126 | ············_\x8c_\x8i_\x8s············1.4.1 | 126 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | -·name:·Ensure·aide·is·installed | ||
| 136 | ··package: | ||
| 137 | ····name:·aide | ||
| 138 | ····state:·present | ||
| 139 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 140 | ··tags: | ||
| 141 | ··-·CJIS-5.10.1.3 | ||
| 142 | ··-·DISA-STIG-UBTU-20-010450 | ||
| 143 | ··-·NIST-800-53-CM-6(a) | ||
| 144 | ··-·PCI-DSS-Req-11.5 | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | ||
| 146 | ··-·enable_strategy | ||
| 147 | ··-·low_complexity | ||
| 148 | ··-·low_disruption | ||
| 149 | ··-·medium_severity | ||
| 150 | ··-·no_reboot_needed | ||
| 151 | ··-·package_aide_installed | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | include·install_aide | 135 | include·install_aide |
| 158 | class·install_aide·{ | 136 | class·install_aide·{ |
| 159 | ··package·{·'aide': | 137 | ··package·{·'aide': |
| 160 | ····ensure·=>·'installed', | 138 | ····ensure·=>·'installed', |
| 161 | ··} | 139 | ··} |
| 162 | } | 140 | } |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 146 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 147 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 148 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 175 | else | 149 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 151 | fi |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | -·name:·Ensure·aide·is·installed | ||
| 162 | ··package: | ||
| 163 | ····name:·aide | ||
| 164 | ····state:·present | ||
| 165 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 166 | ··tags: | ||
| 167 | ··-·CJIS-5.10.1.3 | ||
| 168 | ··-·DISA-STIG-UBTU-20-010450 | ||
| 169 | ··-·NIST-800-53-CM-6(a) | ||
| 170 | ··-·PCI-DSS-Req-11.5 | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | ||
| 172 | ··-·enable_strategy | ||
| 173 | ··-·low_complexity | ||
| 174 | ··-·low_disruption | ||
| 175 | ··-·medium_severity | ||
| 176 | ··-·no_reboot_needed | ||
| 177 | ··-·package_aide_installed | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·aideinit | 180 | $·sudo·aideinit |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 183 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 183 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 184 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 184 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 208, 14 lines modified | Offset 208, 40 lines modified | ||
| 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 209 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 209 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 210 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 210 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 211 | ············_\x8c_\x8i_\x8s············1.4.1 | 211 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 212 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 212 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 217 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 218 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 219 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 220 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 221 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| Max diff block lines reached; 1754740/1760831 bytes (99.65%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·342d·3131·2d30·3 | 00037d60:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16561, 741 lines modified | Offset 16561, 741 lines modified | ||
| 00040b00:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | 00040b00:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | ||
| 00040b10:·3037·3222·2074·6162·696e·6465·783d·2230··072"·tabindex="0 | 00040b10:·3037·3222·2074·6162·696e·6465·783d·2230··072"·tabindex="0 | ||
| 00040b20:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00040b20:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00040b30:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00040b30:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00040b40:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00040b40:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00040b50:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00040b50:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (727 lines added, 727 lines removed) | |
| 00040b60:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00040b60:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00040b70:·6961·7469·6f6e·20 | 00040b70:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 00040b80:·6 | 00040b80:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 00040b90:· | 00040b90:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 00040ba0:· | 00040ba0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 00040bb0:· | 00040bb0:·7365·2220·6964·3d22·6964·6d31·3130·3732··se"·id="idm11072 | ||
| 00040bc0:·3 | 00040bc0:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | ||
| 00040bd0:· | 00040bd0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 00040be0:·7 | 00040be0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 00040bf0:· | 00040bf0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 00040c00:·6 | 00040c00:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | ||
| 00040c10:·6f6 | 00040c10:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | ||
| 00040c20:· | 00040c20:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | ||
| 00040c30:· | 00040c30:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | ||
| 00040c40:· | 00040c40:·5d3b·2074·6865·6e0a·0a23·204c·6973·7420··];·then..#·List· | ||
| 00040c50:· | 00040c50:·6f66·206c·6f67·2066·696c·6520·7061·7468··of·log·file·path | ||
| 00040c60:·3 | 00040c60:·7320·746f·2062·6520·696e·7370·6563·7465··s·to·be·inspecte | ||
| 00040c70:· | 00040c70:·6420·666f·7220·636f·7272·6563·7420·7065··d·for·correct·pe | ||
| 00040c80:·7 | 00040c80:·726d·6973·7369·6f6e·730a·2320·2a20·5072··rmissions.#·*·Pr | ||
| 00040c90:·6 | 00040c90:·696d·6172·696c·7920·696e·7370·6563·7420··imarily·inspect· | ||
| 00040ca0:·6 | 00040ca0:·6c6f·6720·6669·6c65·2070·6174·6873·206c··log·file·paths·l | ||
| 00040cb0:· | 00040cb0:·6973·7465·6420·696e·202f·6574·632f·7273··isted·in·/etc/rs | ||
| 00040cc0:· | 00040cc0:·7973·6c6f·672e·636f·6e66·0a52·5359·534c··yslog.conf.RSYSL | ||
| 00040cd0:· | 00040cd0:·4f47·5f45·5443·5f43·4f4e·4649·473d·222f··OG_ETC_CONFIG="/ | ||
| 00040ce0:· | 00040ce0:·6574·632f·7273·7973·6c6f·672e·636f·6e66··etc/rsyslog.conf | ||
| 00040cf0:· | 00040cf0:·220a·2320·2a20·416e·6420·616c·736f·2074··".#·*·And·also·t | ||
| 00040d00:· | 00040d00:·6865·206c·6f67·2066·696c·6520·7061·7468··he·log·file·path | ||
| 00040d10:· | 00040d10:·7320·6c69·7374·6564·2061·6674·6572·2072··s·listed·after·r | ||
| 00040d20:· | 00040d20:·7379·736c·6f67·2773·2024·496e·636c·7564··syslog's·$Includ | ||
| 00040d30:·6 | 00040d30:·6543·6f6e·6669·6720·6469·7265·6374·6976··eConfig·directiv | ||
| 00040d40:·6 | 00040d40:·650a·2320·2020·2873·746f·7265·2074·6865··e.#···(store·the | ||
| 00040d50:· | 00040d50:·2072·6573·756c·7420·696e·746f·2061·7272···result·into·arr | ||
| 00040d60:·6 | 00040d60:·6179·2066·6f72·2074·6865·2063·6173·6520··ay·for·the·case· | ||
| 00040d70:· | 00040d70:·7468·6572·6527·7320·7368·656c·6c20·676c··there's·shell·gl | ||
| 00040d80:·6 | 00040d80:·6f62·2075·7365·6420·6173·2076·616c·7565··ob·used·as·value | ||
| 00040d90:· | 00040d90:·206f·6620·496e·636c·7564·6543·6f6e·6669···of·IncludeConfi | ||
| 00040da0:·6 | 00040da0:·6729·0a72·6561·6461·7272·6179·202d·7420··g).readarray·-t· | ||
| 00040db0:· | 00040db0:·4f4c·445f·494e·4320·266c·743b·2026·6c74··OLD_INC·<·< | ||
| 00040dc0:· | 00040dc0:·3b28·6772·6570·202d·6520·225c·2449·6e63··;(grep·-e·"\$Inc | ||
| 00040dd0:·6 | 00040dd0:·6c75·6465·436f·6e66·6967·5b5b·3a73·7061··ludeConfig[[:spa | ||
| 00040de0:· | 00040de0:·6365·3a5d·5d5c·2b5b·5e5b·3a73·7061·6365··ce:]]\+[^[:space | ||
| 00040df0:· | 00040df0:·3a5d·3b5d·5c2b·2220·2f65·7463·2f72·7379··:];]\+"·/etc/rsy | ||
| 00040e00:·36 | 00040e00:·736c·6f67·2e63·6f6e·6620·7c20·6375·7420··slog.conf·|·cut· | ||
| 00040e10:·2d | 00040e10:·2d64·2027·2027·202d·6620·3229·0a72·6561··-d·'·'·-f·2).rea | ||
| 00040e20:· | 00040e20:·6461·7272·6179·202d·7420·5253·5953·4c4f··darray·-t·RSYSLO | ||
| 00040e30:· | 00040e30:·475f·494e·434c·5544·455f·434f·4e46·4947··G_INCLUDE_CONFIG | ||
| 00040e40:·2 | 00040e40:·2026·6c74·3b20·266c·743b·2866·6f72·2049···<·<(for·I | ||
| 00040e50:· | 00040e50:·4e43·5041·5448·2069·6e20·2224·7b4f·4c44··NCPATH·in·"${OLD | ||
| 00040e60:· | 00040e60:·5f49·4e43·5b40·5d7d·223b·2064·6f20·6576··_INC[@]}";·do·ev | ||
| 00040e70:· | 00040e70:·616c·2070·7269·6e74·6620·2725·735c·5c6e··al·printf·'%s\\n | ||
| 00040e80:·72 | 00040e80:·2720·2224·7b49·4e43·5041·5448·7d22·3b20··'·"${INCPATH}";· | ||
| 00040e90:· | 00040e90:·646f·6e65·290a·7265·6164·6172·7261·7920··done).readarray· | ||
| 00040ea0:· | 00040ea0:·2d74·204e·4557·5f49·4e43·2026·6c74·3b20··-t·NEW_INC·<· | ||
| 00040eb0:· | 00040eb0:·266c·743b·2873·6564·202d·6e20·272f·5e5c··<(sed·-n·'/^\ | ||
| 00040ec0:· | 00040ec0:·732a·696e·636c·7564·6528·2f2c·2f29·2f49··s*include(/,/)/I | ||
| 00040ed0:·70 | 00040ed0:·7027·202f·6574·632f·7273·7973·6c6f·672e··p'·/etc/rsyslog. | ||
| 00040ee0:·6 | 00040ee0:·636f·6e66·207c·2073·6564·202d·6e20·2773··conf·|·sed·-n·'s | ||
| 00040ef0:·4 | 00040ef0:·402e·2a66·696c·655c·732a·3d5c·732a·225c··@.*file\s*=\s*"\ | ||
| 00040f00:· | 00040f00:·285b·2f5b·3a61·6c6e·756d·3a5d·5b3a·7075··([/[:alnum:][:pu | ||
| 00040f10:· | 00040f10:·6e63·743a·5d5d·2a5c·2922·2e2a·405c·3140··nct:]]*\)".*@\1@ | ||
| 00040f20:· | 00040f20:·4970·2729·0a72·6561·6461·7272·6179·202d··Ip').readarray·- | ||
| 00040f30:· | 00040f30:·7420·5253·5953·4c4f·475f·494e·434c·5544··t·RSYSLOG_INCLUD | ||
| 00040f40:· | 00040f40:·4520·266c·743b·2026·6c74·3b28·666f·7220··E·<·<(for· | ||
| 00040f50:· | 00040f50:·494e·4350·4154·4820·696e·2022·247b·4e45··INCPATH·in·"${NE | ||
| 00040f60:· | 00040f60:·575f·494e·435b·405d·7d22·3b20·646f·2065··W_INC[@]}";·do·e | ||
| 00040f70:· | 00040f70:·7661·6c20·7072·696e·7466·2027·2573·5c5c··val·printf·'%s\\ | ||
| 00040f80:·6 | 00040f80:·6e27·2022·247b·494e·4350·4154·487d·223b··n'·"${INCPATH}"; | ||
| 00040f90:· | 00040f90:·2064·6f6e·6529·0a0a·2320·4465·636c·6172···done)..#·Declar | ||
| 00040fa0:· | 00040fa0:·6520·616e·2061·7272·6179·2074·6f20·686f··e·an·array·to·ho | ||
| 00040fb0:·6 | 00040fb0:·6c64·2074·6865·2066·696e·616c·206c·6973··ld·the·final·lis | ||
| 00040fc0:· | 00040fc0:·7420·6f66·2064·6966·6665·7265·6e74·206c··t·of·different·l | ||
| 00040fd0:·6 | 00040fd0:·6f67·2066·696c·6520·7061·7468·730a·6465··og·file·paths.de | ||
| 00040fe0:· | 00040fe0:·636c·6172·6520·2d61·204c·4f47·5f46·494c··clare·-a·LOG_FIL | ||
| 00040ff0:· | 00040ff0:·455f·5041·5448·530a·0a23·2041·7272·6179··E_PATHS..#·Array | ||
| 00041000:· | 00041000:·2074·6f20·686f·6c64·2061·6c6c·2072·7379···to·hold·all·rsy | ||
| 00041010:· | 00041010:·736c·6f67·2063·6f6e·6669·6720·656e·7472··slog·config·entr | ||
| 00041020:· | 00041020:·6965·730a·5253·5953·4c4f·475f·434f·4e46··ies.RSYSLOG_CONF | ||
| 00041030:· | 00041030:·4947·533d·2829·0a52·5359·534c·4f47·5f43··IGS=().RSYSLOG_C | ||
| 00041040:· | 00041040:·4f4e·4649·4753·3d28·2224·7b52·5359·534c··ONFIGS=("${RSYSL | ||
| 00041050:·4 | 00041050:·4f47·5f45·5443·5f43·4f4e·4649·477d·2220··OG_ETC_CONFIG}"· | ||
| 00041060:·2 | 00041060:·2224·7b52·5359·534c·4f47·5f49·4e43·4c55··"${RSYSLOG_INCLU | ||
| 00041070:· | 00041070:·4445·5f43·4f4e·4649·475b·405d·7d22·2022··DE_CONFIG[@]}"·" | ||
| 00041080:· | 00041080:·247b·5253·5953·4c4f·475f·494e·434c·5544··${RSYSLOG_INCLUD | ||
| 00041090:· | 00041090:·455b·405d·7d22·290a·0a23·2047·6574·2066··E[@]}")..#·Get·f | ||
| 000410a0:· | 000410a0:·756c·6c20·6c69·7374·206f·6620·6669·6c65··ull·list·of·file | ||
| 000410b0:· | 000410b0:·7320·746f·2062·6520·6368·6563·6b65·640a··s·to·be·checked. | ||
| 000410c0:· | 000410c0:·2320·5253·5953·4c4f·475f·434f·4e46·4947··#·RSYSLOG_CONFIG | ||
| 000410d0:· | 000410d0:·5320·6d61·7920·636f·6e74·6169·6e20·676c··S·may·contain·gl | ||
| 000410e0:· | 000410e0:·6f62·7320·7375·6368·2061·730a·2320·2f65··obs·such·as.#·/e | ||
| 000410f0:· | 000410f0:·7463·2f72·7379·736c·6f67·2e64·2f2a·2e63··tc/rsyslog.d/*.c | ||
| 00041100:· | 00041100:·6f6e·6620·2f65·7463·2f72·7379·736c·6f67··onf·/etc/rsyslog | ||
| 00041110:· | 00041110:·2e64·2f2a·2e66·7275·6c65·0a23·2053·6f2c··.d/*.frule.#·So, | ||
| 00041120:· | 00041120:·206c·6f6f·7020·6f76·6572·2074·6865·2065···loop·over·the·e | ||
| 00041130:·6 | 00041130:·6e74·7269·6573·2069·6e20·5253·5953·4c4f··ntries·in·RSYSLO | ||
| 00041140:· | 00041140:·475f·434f·4e46·4947·5320·616e·6420·7573··G_CONFIGS·and·us | ||
| 00041150:· | 00041150:·6520·6669·6e64·2074·6f20·6765·7420·7468··e·find·to·get·th | ||
| 00041160:· | 00041160:·6520·6c69·7374·206f·6620·696e·636c·7564··e·list·of·includ | ||
| 00041170:· | 00041170:·6564·2066·696c·6573·2e0a·5253·5953·4c4f··ed·files..RSYSLO | ||
| 00041180:·75 | 00041180:·475f·434f·4e46·4947·5f46·494c·4553·3d28··G_CONFIG_FILES=( | ||
| 00041190:· | 00041190:·290a·666f·7220·454e·5452·5920·696e·2022··).for·ENTRY·in·" | ||
| 000411a0:· | 000411a0:·247b·5253·5953·4c4f·475f·434f·4e46·4947··${RSYSLOG_CONFIG | ||
| 000411b0:· | 000411b0:·535b·405d·7d22·0a64·6f0a·0923·2049·6620··S[@]}".do..#·If· | ||
| 000411c0:·6 | 000411c0:·6469·7265·6374·6f72·792c·2072·7379·736c··directory,·rsysl | ||
| 000411d0:· | 000411d0:·6f67·2077·696c·6c20·7365·6172·6368·2066··og·will·search·f | ||
| Max diff block lines reached; 1049560/1151596 bytes (91.14%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·20.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·20.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 289, 14 lines modified | Offset 289, 137 lines modified | ||
| 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP-007- | 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP-007- |
| 290 | ···························3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 290 | ···························3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 298 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 299 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 300 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 301 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 302 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 303 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value·of | ||
| 304 | IncludeConfig) | ||
| 305 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+"·/ | ||
| 306 | etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 307 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 308 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 309 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed·- | ||
| 310 | n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 311 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 312 | '%s\\n'·"${INCPATH}";·done) | ||
| 313 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 314 | declare·-a·LOG_FILE_PATHS | ||
| 315 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 316 | RSYSLOG_CONFIGS=() | ||
| 317 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 318 | {RSYSLOG_INCLUDE[@]}") | ||
| 319 | #·Get·full·list·of·files·to·be·checked | ||
| 320 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 321 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 322 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 323 | included·files. | ||
| 324 | RSYSLOG_CONFIG_FILES=() | ||
| 325 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 326 | do | ||
| 327 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 328 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 329 | » if·[·-d·"${ENTRY}"·] | ||
| 330 | » then | ||
| 331 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 332 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 333 | » elif·[·-f·"${ENTRY}"·] | ||
| 334 | » then | ||
| 335 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 336 | » else | ||
| 337 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 338 | » fi | ||
| 339 | done | ||
| 340 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 341 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default·configuration) | ||
| 342 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 343 | do | ||
| 344 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 345 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 346 | ('$')·characters, | ||
| 347 | » #·*·Ignore·empty·lines, | ||
| 348 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 349 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 350 | not·log·files | ||
| 351 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 352 | path | ||
| 353 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if·all | ||
| 354 | of·the | ||
| 355 | » #·following·are·met: | ||
| 356 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 357 | » #·*·it·is·preceded·by·space | ||
| 358 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';')·characters | ||
| 359 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 360 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 361 | » then | ||
| 362 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 363 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 364 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 365 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 366 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 367 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 368 | {FILTERED_PATHS}") | ||
| 369 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 370 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 371 | newline),·split | ||
| 372 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 373 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 374 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 375 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 376 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 377 | » » #·Delete·the·temporary·array | ||
| 378 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 379 | » fi | ||
| 380 | done | ||
| 381 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so·grep | ||
| 382 | regex·is·a·bit | ||
| 383 | #·curly: | ||
| 384 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 385 | #·extract·File="logfile"·expression | ||
| 386 | #·match·only·"logfile"·expression | ||
| 387 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 388 | do | ||
| 389 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 390 | "${LOG_FILE}") | ||
| 391 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 392 | alnum:][:punct:]]*)\"\s*\)") | ||
| 393 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| Max diff block lines reached; 136901/143507 bytes (95.40%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d90:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037da0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037da0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037db0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037db0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037dc0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037dc0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037dd0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037dd0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037de0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037de0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037df0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e00:·6f66·2032·3032·342d·3131·2d30·3 | 00037e00:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00037e10:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037e10:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e20:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e20:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e30:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e30:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e40:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e40:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e50:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e50:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e60:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e60:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e70:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e70:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15073, 168 lines modified | Offset 15073, 168 lines modified | ||
| 0003ae00:·6765·743d·2223·6964·6d32·3733·3522·2074··get="#idm2735"·t | 0003ae00:·6765·743d·2223·6964·6d32·3733·3522·2074··get="#idm2735"·t | ||
| 0003ae10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ae10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ae20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ae20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ae30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ae30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003ae40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003ae40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003ae50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003ae50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ae60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ae60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ae70:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003ae80:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ae90:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ae70:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003ae80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ae90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003aea0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003aeb0:·2069·643d·2269·646d·3237·3335·223e·3c74···id="idm2735"><t | |||
| 0003aec0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003aed0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003aee0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003aef0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003af00:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003af10:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003af20:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003af30:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003af40:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003af50:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003af60:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003af70:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003af80:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003af90:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003afa0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003afb0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003afc0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003afd0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003afe0:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003aff0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b000:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b010:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b020:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b030:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b040:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b050:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b060:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b070:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b080:·4449·5341·2d53·5449·472d·5542·5455·2d32··DISA-STIG-UBTU-2 | |||
| 0003b090:·302d·3031·3034·3530·0a20·202d·204e·4953··0-010450.··-·NIS | |||
| 0003b0a0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b0b0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b0c0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b0d0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b0e0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b0f0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b100:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b110:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b120:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b130:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b140:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b150:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b160:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b170:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b180:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003 | 0003aea0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003aeb0:·6964·3d22·6964·6d32·3733·3522·3e3c·7461··id="idm2735"><ta | |||
| 0003aec0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003aed0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003aee0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003aef0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003af00:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003af10:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003af20:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003af30:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003af40:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003af50:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003af60:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003af70:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003af80:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003af90:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003afa0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003afb0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003afc0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b1a0:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | |||
| 0003b1b0:·3733·3622·2074·6162·696e·6465·783d·2230··736"·tabindex="0 | |||
| 0003b1c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b1d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b1e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b1f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b200:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b210:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b220:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b230:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b240:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b250:·6170·7365·2220·6964·3d22·6964·6d32·3733··apse"·id="idm273 | |||
| 0003b260:·3622·3e3c·7461·626c·6520·636c·6173·733d··6"><table·class= | |||
| 0003b270:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b280:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b290:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b2a0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b2b0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b2c0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b2d0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b2e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b2f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b300:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b310:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b320:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b330:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b340:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b350:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003 | 0003afd0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | ||
| 0003afe0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003aff0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b000:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| Max diff block lines reached; 17107062/17130024 bytes (99.87%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·20.04·LTS·Security·Technical·Implementation | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·20.04·LTS·Security·Technical·Implementation |
| 42 | ··············Guide·(STIG)·V1R11 | 42 | ··············Guide·(STIG)·V1R11 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 45 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 114, 66 lines modified | Offset 114, 66 lines modified | ||
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 117 | ············_\x8c_\x8i_\x8s············1.4.1 | 117 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | -·name:·Ensure·aide·is·installed | ||
| 127 | ··package: | ||
| 128 | ····name:·aide | ||
| 129 | ····state:·present | ||
| 130 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 131 | ··tags: | ||
| 132 | ··-·CJIS-5.10.1.3 | ||
| 133 | ··-·DISA-STIG-UBTU-20-010450 | ||
| 134 | ··-·NIST-800-53-CM-6(a) | ||
| 135 | ··-·PCI-DSS-Req-11.5 | ||
| 136 | ··-·PCI-DSSv4-11.5.2 | ||
| 137 | ··-·enable_strategy | ||
| 138 | ··-·low_complexity | ||
| 139 | ··-·low_disruption | ||
| 140 | ··-·medium_severity | ||
| 141 | ··-·no_reboot_needed | ||
| 142 | ··-·package_aide_installed | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | include·install_aide | 126 | include·install_aide |
| 149 | class·install_aide·{ | 127 | class·install_aide·{ |
| 150 | ··package·{·'aide': | 128 | ··package·{·'aide': |
| 151 | ····ensure·=>·'installed', | 129 | ····ensure·=>·'installed', |
| 152 | ··} | 130 | ··} |
| 153 | } | 131 | } |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | 137 | #·Remediation·is·applicable·only·in·certain·platforms |
| 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 165 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 139 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 166 | else | 140 | else |
| 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 141 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 168 | fi | 142 | fi |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | [[packages]] | ||
| 145 | name·=·"aide" | ||
| 146 | version·=·"*" | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | -·name:·Ensure·aide·is·installed | ||
| 153 | ··package: | ||
| 154 | ····name:·aide | ||
| 155 | ····state:·present | ||
| 156 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 157 | ··tags: | ||
| 158 | ··-·CJIS-5.10.1.3 | ||
| 159 | ··-·DISA-STIG-UBTU-20-010450 | ||
| 160 | ··-·NIST-800-53-CM-6(a) | ||
| 161 | ··-·PCI-DSS-Req-11.5 | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | ||
| 163 | ··-·enable_strategy | ||
| 164 | ··-·low_complexity | ||
| 165 | ··-·low_disruption | ||
| 166 | ··-·medium_severity | ||
| 167 | ··-·no_reboot_needed | ||
| 168 | ··-·package_aide_installed | ||
| 169 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 169 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 170 | Run·the·following·command·to·generate·a·new·database: | 170 | Run·the·following·command·to·generate·a·new·database: |
| 171 | $·sudo·aideinit | 171 | $·sudo·aideinit |
| 172 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 172 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 173 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of·these·files),·in·a | 173 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of·these·files),·in·a |
| 174 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The | 174 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The |
| 175 | newly-generated·database·can·be·installed·as·follows: | 175 | newly-generated·database·can·be·installed·as·follows: |
| Offset 199, 14 lines modified | Offset 199, 40 lines modified | ||
| 199 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 199 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 200 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 200 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 201 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 201 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 202 | ············_\x8c_\x8i_\x8s············1.4.1 | 202 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 203 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 203 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 204 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 204 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 205 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 205 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 207 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 208 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 209 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 210 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 211 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 212 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| Max diff block lines reached; 1204481/1210513 bytes (99.50%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d30:·2d31·312d·303 | 00037d30:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15108, 169 lines modified | Offset 15108, 169 lines modified | ||
| 0003b030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b040:·3239·3032·2220·7461·6269·6e64·6578·3d22··2902"·tabindex=" | 0003b040:·3239·3032·2220·7461·6269·6e64·6578·3d22··2902"·tabindex=" | ||
| 0003b050:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b050:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b060:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b060:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b070:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b070:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b080:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b080:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b090:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b090:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b0a0:·6469·6174·696f·6e20· | 0003b0a0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 0003b0b0:· | 0003b0b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b0c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b0d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b0e0:·6c61·7073·6522·2069·643d·2269·646d·3239··lapse"·id="idm29 | |||
| 0003b0f0:·3032·223e·3c74·6162·6c65·2063·6c61·7373··02"><table·class | |||
| 0003b100:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b0c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b0d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b0e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b0f0:·3930·3222·3e3c·7461·626c·6520·636c·6173··902"><table·clas | |||
| 0003b100:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b110:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b1 | 0003b110:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b120:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b130:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b140:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b150:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b160:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b170:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b180:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b190:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b130:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b140:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b150:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b160:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b170:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b180:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b190:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b1a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b1b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b1c0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b1d0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b1e0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b1f0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b200:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b210:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b220:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b230:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b240:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b250:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b260:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b270:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b280:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b290:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b2a0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b2b0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b2c0:·2d55·4254·552d·3232·2d36·3531·3031·300a··-UBTU-22-651010. | |||
| 0003b2d0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b2e0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b2f0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b300:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b310:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b320:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b330:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b340:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b350:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b360:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b370:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b380:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b390:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b3a0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b3b0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b3c0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b3d0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b3e0:·3d22·2369·646d·3239·3033·2220·7461·6269··="#idm2903"·tabi | |||
| 0003b3f0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b400:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b410:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b420:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b430:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b440:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b450:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b460:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b470:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b480:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b490:·2269·646d·3239·3033·223e·3c74·6162·6c65··"idm2903"><table | |||
| 0003b4a0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b4b0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b4c0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b4d0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b4e0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b4f0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b500:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b510:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b520:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b530:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b540:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b550:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b560:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b | 0003b1a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b1b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b1c0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b1d0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b1e0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b1f0:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b200:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b210:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b220:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b230:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b240:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b580:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b590:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b5a0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| Max diff block lines reached; 7612767/7635867 bytes (99.70%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 123, 66 lines modified | Offset 123, 66 lines modified | ||
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 127 | ············_\x8c_\x8i_\x8s············1.3.1 | 127 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | -·name:·Ensure·aide·is·installed | ||
| 136 | ··package: | ||
| 137 | ····name:·aide | ||
| 138 | ····state:·present | ||
| 139 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 140 | ··tags: | ||
| 141 | ··-·CJIS-5.10.1.3 | ||
| 142 | ··-·DISA-STIG-UBTU-22-651010 | ||
| 143 | ··-·NIST-800-53-CM-6(a) | ||
| 144 | ··-·PCI-DSS-Req-11.5 | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | ||
| 146 | ··-·enable_strategy | ||
| 147 | ··-·low_complexity | ||
| 148 | ··-·low_disruption | ||
| 149 | ··-·medium_severity | ||
| 150 | ··-·no_reboot_needed | ||
| 151 | ··-·package_aide_installed | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | include·install_aide | 135 | include·install_aide |
| 158 | class·install_aide·{ | 136 | class·install_aide·{ |
| 159 | ··package·{·'aide': | 137 | ··package·{·'aide': |
| 160 | ····ensure·=>·'installed', | 138 | ····ensure·=>·'installed', |
| 161 | ··} | 139 | ··} |
| 162 | } | 140 | } |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 146 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 147 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 148 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 175 | else | 149 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 151 | fi |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | -·name:·Ensure·aide·is·installed | ||
| 162 | ··package: | ||
| 163 | ····name:·aide | ||
| 164 | ····state:·present | ||
| 165 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 166 | ··tags: | ||
| 167 | ··-·CJIS-5.10.1.3 | ||
| 168 | ··-·DISA-STIG-UBTU-22-651010 | ||
| 169 | ··-·NIST-800-53-CM-6(a) | ||
| 170 | ··-·PCI-DSS-Req-11.5 | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | ||
| 172 | ··-·enable_strategy | ||
| 173 | ··-·low_complexity | ||
| 174 | ··-·low_disruption | ||
| 175 | ··-·medium_severity | ||
| 176 | ··-·no_reboot_needed | ||
| 177 | ··-·package_aide_installed | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·aideinit | 180 | $·sudo·aideinit |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 207, 14 lines modified | Offset 207, 40 lines modified | ||
| 207 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 207 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 209 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 209 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 210 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 210 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 211 | ············_\x8c_\x8i_\x8s············1.3.1 | 211 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 212 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 212 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 215 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 216 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 217 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 218 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 219 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 220 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| Max diff block lines reached; 953840/959997 bytes (99.36%) of diff not shown. | |||
| Offset 14286, 15 lines modified | Offset 14286, 15 lines modified | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d40:·3131·2d30·3 | 00037d40:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15099, 168 lines modified | Offset 15099, 168 lines modified | ||
| 0003afa0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | 0003afa0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | ||
| 0003afb0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003afb0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003afc0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003afc0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003afd0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003afd0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003afe0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003afe0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003aff0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003aff0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b000:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b000:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b010:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b020:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b030:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b040:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b050:·2069·643d·2269·646d·3239·3032·223e·3c74···id="idm2902"><t | |||
| 0003b060:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b070:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b010:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b020:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b030:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b040:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b050:·2220·6964·3d22·6964·6d32·3930·3222·3e3c··"·id="idm2902">< | |||
| 0003b060:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b070:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b080:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b0 | 0003b080:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b090:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b0a0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b0b0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b0a0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b0b0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b0c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b0d0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b0e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b0f0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b100:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b110:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b120:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b130:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b140:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b150:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b160:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b170:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b180:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b190:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b1a0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b1b0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b1c0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b1d0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b1e0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b1f0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b200:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b210:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b220:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b230:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b240:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b250:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b260:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b270:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b280:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b290:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b2a0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b2b0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b2c0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b2d0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b2e0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b2f0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b300:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b310:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b320:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b330:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b340:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b350:·3239·3033·2220·7461·6269·6e64·6578·3d22··2903"·tabindex=" | |||
| 0003b360:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b370:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b380:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b390:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b3a0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b3b0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b3c0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b3d0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b3e0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b3f0:·6c61·7073·6522·2069·643d·2269·646d·3239··lapse"·id="idm29 | |||
| 0003b400:·3033·223e·3c74·6162·6c65·2063·6c61·7373··03"><table·class | |||
| 0003b410:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b420:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b430:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b440:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b450:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b460:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b470:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b480:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b490:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b4a0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b4b0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b4c0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b4d0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b | 0003b0c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b0d0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b0e0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b0f0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b100:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b110:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b120:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b130:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b140:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b150:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b160:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b | 0003b170:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | ||
| 0003b180:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b190:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b1a0:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b1b0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b510:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| Max diff block lines reached; 7451841/7474803 bytes (99.69%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 121, 66 lines modified | Offset 121, 66 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 124 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 125 | ············_\x8c_\x8i_\x8s············1.3.1 | 125 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | -·name:·Ensure·aide·is·installed | ||
| 134 | ··package: | ||
| 135 | ····name:·aide | ||
| 136 | ····state:·present | ||
| 137 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 138 | ··tags: | ||
| 139 | ··-·CJIS-5.10.1.3 | ||
| 140 | ··-·DISA-STIG-UBTU-22-651010 | ||
| 141 | ··-·NIST-800-53-CM-6(a) | ||
| 142 | ··-·PCI-DSS-Req-11.5 | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | ||
| 144 | ··-·enable_strategy | ||
| 145 | ··-·low_complexity | ||
| 146 | ··-·low_disruption | ||
| 147 | ··-·medium_severity | ||
| 148 | ··-·no_reboot_needed | ||
| 149 | ··-·package_aide_installed | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | include·install_aide | 133 | include·install_aide |
| 156 | class·install_aide·{ | 134 | class·install_aide·{ |
| 157 | ··package·{·'aide': | 135 | ··package·{·'aide': |
| 158 | ····ensure·=>·'installed', | 136 | ····ensure·=>·'installed', |
| 159 | ··} | 137 | ··} |
| 160 | } | 138 | } |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | 144 | #·Remediation·is·applicable·only·in·certain·platforms |
| 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 145 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 172 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 146 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 173 | else | 147 | else |
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 148 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 175 | fi | 149 | fi |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | -·name:·Ensure·aide·is·installed | ||
| 160 | ··package: | ||
| 161 | ····name:·aide | ||
| 162 | ····state:·present | ||
| 163 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 164 | ··tags: | ||
| 165 | ··-·CJIS-5.10.1.3 | ||
| 166 | ··-·DISA-STIG-UBTU-22-651010 | ||
| 167 | ··-·NIST-800-53-CM-6(a) | ||
| 168 | ··-·PCI-DSS-Req-11.5 | ||
| 169 | ··-·PCI-DSSv4-11.5.2 | ||
| 170 | ··-·enable_strategy | ||
| 171 | ··-·low_complexity | ||
| 172 | ··-·low_disruption | ||
| 173 | ··-·medium_severity | ||
| 174 | ··-·no_reboot_needed | ||
| 175 | ··-·package_aide_installed | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 177 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·aideinit | 178 | $·sudo·aideinit |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 181 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 181 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 182 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 182 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 205, 14 lines modified | Offset 205, 40 lines modified | ||
| 205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 206 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 206 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 207 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 207 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 209 | ············_\x8c_\x8i_\x8s············1.3.1 | 209 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 213 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 214 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 215 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 216 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 217 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 218 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| Max diff block lines reached; 936281/942448 bytes (99.35%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d30:·2d31·312d·303 | 00037d30:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15116, 168 lines modified | Offset 15116, 168 lines modified | ||
| 0003b0b0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | 0003b0b0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | ||
| 0003b0c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b0c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b0d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b0d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b0e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b0e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b0f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b0f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b100:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b100:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b110:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b110:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b120:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b130:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b140:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b150:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b160:·2069·643d·2269·646d·3239·3032·223e·3c74···id="idm2902"><t | |||
| 0003b170:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b180:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b120:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b130:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b140:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b150:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b160:·2220·6964·3d22·6964·6d32·3930·3222·3e3c··"·id="idm2902">< | |||
| 0003b170:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b180:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b190:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b1 | 0003b190:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b1a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b1b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b1c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b1b0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b1c0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b1d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1e0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b1f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b200:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b210:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b220:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b230:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b240:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b250:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b260:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b270:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b280:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b290:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b2a0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b2b0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b2c0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b2d0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b2e0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b2f0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b300:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b310:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b320:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b330:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b340:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b350:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b360:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b370:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b380:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b390:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b3a0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b3b0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b3c0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b3d0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b3e0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b3f0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b400:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b410:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b420:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b430:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b440:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b450:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b460:·3239·3033·2220·7461·6269·6e64·6578·3d22··2903"·tabindex=" | |||
| 0003b470:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b480:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b490:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b4a0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b4b0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b4c0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b4d0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b4e0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b4f0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b500:·6c61·7073·6522·2069·643d·2269·646d·3239··lapse"·id="idm29 | |||
| 0003b510:·3033·223e·3c74·6162·6c65·2063·6c61·7373··03"><table·class | |||
| 0003b520:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b530:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b540:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b550:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b560:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b570:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b580:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b590:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b5a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b5b0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b5c0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b5d0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b5e0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b | 0003b1d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b1e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b1f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b200:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b210:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b220:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b230:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b240:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b250:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b260:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b270:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b | 0003b280:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | ||
| 0003b290:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b2a0:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b2b0:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b2c0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b620:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| Max diff block lines reached; 21662753/21685715 bytes (99.89%) of diff not shown. | |||
| Offset 14286, 15 lines modified | Offset 14286, 15 lines modified | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d40:·3131·2d30·3 | 00037d40:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15111, 169 lines modified | Offset 15111, 169 lines modified | ||
| 0003b060:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b060:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b070:·3d22·2369·646d·3239·3032·2220·7461·6269··="#idm2902"·tabi | 0003b070:·3d22·2369·646d·3239·3032·2220·7461·6269··="#idm2902"·tabi | ||
| 0003b080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b0d0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b0d0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | ||
| 0003b0e0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b0f0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b100:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b0e0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b0f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b100:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b110:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b120:·3d22·6964·6d32·3930·3222·3e3c·7461·626c··="idm2902"><tabl | |||
| 0003b130:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b140:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b150:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b160:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b170:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b180:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b190:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b1a0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b1b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b1c0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b1d0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b1e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b1f0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b200:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b210:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b220:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b230:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b240:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b250:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b260:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b270:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b280:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b290:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b2a0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b2b0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b2c0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b2d0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b2e0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b2f0:·412d·5354·4947·2d55·4254·552d·3232·2d36··A-STIG-UBTU-22-6 | |||
| 0003b300:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b310:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b320:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b330:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b340:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b350:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b360:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b370:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b380:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b390:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b3a0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b3b0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b3c0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b3d0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b3e0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b3f0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b | 0003b110:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b120:·2269·646d·3239·3032·223e·3c74·6162·6c65··"idm2902"><table | |||
| 0003b130:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b140:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b150:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b160:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b170:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b180:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b190:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b1a0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b1b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b1c0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b410:·7461·7267·6574·3d22·2369·646d·3239·3033··target="#idm2903 | |||
| 0003b420:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b430:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b440:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b450:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b460:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b470:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b480:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b490:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b4a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b4b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b4c0:·6522·2069·643d·2269·646d·3239·3033·223e··e"·id="idm2903"> | |||
| 0003b4d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b4e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b4f0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b500:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b510:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b520:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b530:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b540:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b550:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b560:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b570:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b580:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b590:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b | 0003b1d0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b1e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b1f0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b200:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b210:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b220:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b230:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b240:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b250:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b260:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b270:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b5b0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b5c0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| Max diff block lines reached; 21622677/21645777 bytes (99.89%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·342d·3131·2d30·3 | 00037d60:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16538, 741 lines modified | Offset 16538, 741 lines modified | ||
| 00040990:·743d·2223·6964·6d31·3135·3337·2220·7461··t="#idm11537"·ta | 00040990:·743d·2223·6964·6d31·3135·3337·2220·7461··t="#idm11537"·ta | ||
| 000409a0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 000409a0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 000409b0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 000409b0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 000409c0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 000409c0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 000409d0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 000409d0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 000409e0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 000409e0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (727 lines added, 727 lines removed) | |
| 000409f0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 000409f0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 00040a00:· | 00040a00:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 00040a10:· | 00040a10:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 00040a20:· | 00040a20:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 00040a30:· | 00040a30:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 00040a40:· | 00040a40:·2269·646d·3131·3533·3722·3e3c·7072·653e··"idm11537"><pre> | ||
| 00040a50:· | 00040a50:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 00040a60:·6 | 00040a60:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 00040a70:· | 00040a70:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 00040a80:·6 | 00040a80:·6e20·706c·6174·666f·726d·730a·6966·205b··n·platforms.if·[ | ||
| 00040a90:· | 00040a90:·2021·202d·6620·2f2e·646f·636b·6572·656e···!·-f·/.dockeren | ||
| 00040aa0:·7 | 00040aa0:·7620·5d20·2661·6d70·3b26·616d·703b·205b··v·]·&&·[ | ||
| 00040ab0:·2 | 00040ab0:·2021·202d·6620·2f72·756e·2f2e·636f·6e74···!·-f·/run/.cont | ||
| 00040ac0:· | 00040ac0:·6169·6e65·7265·6e76·205d·3b20·7468·656e··ainerenv·];·then | ||
| 00040ad0:· | 00040ad0:·0a0a·2320·4c69·7374·206f·6620·6c6f·6720··..#·List·of·log· | ||
| 00040ae0:· | 00040ae0:·6669·6c65·2070·6174·6873·2074·6f20·6265··file·paths·to·be | ||
| 00040af0:· | 00040af0:·2069·6e73·7065·6374·6564·2066·6f72·2063···inspected·for·c | ||
| 00040b00:· | 00040b00:·6f72·7265·6374·2070·6572·6d69·7373·696f··orrect·permissio | ||
| 00040b10:· | 00040b10:·6e73·0a23·202a·2050·7269·6d61·7269·6c79··ns.#·*·Primarily | ||
| 00040b20:· | 00040b20:·2069·6e73·7065·6374·206c·6f67·2066·696c···inspect·log·fil | ||
| 00040b30:· | 00040b30:·6520·7061·7468·7320·6c69·7374·6564·2069··e·paths·listed·i | ||
| 00040b40:· | 00040b40:·6e20·2f65·7463·2f72·7379·736c·6f67·2e63··n·/etc/rsyslog.c | ||
| 00040b50:·6 | 00040b50:·6f6e·660a·5253·5953·4c4f·475f·4554·435f··onf.RSYSLOG_ETC_ | ||
| 00040b60:· | 00040b60:·434f·4e46·4947·3d22·2f65·7463·2f72·7379··CONFIG="/etc/rsy | ||
| 00040b70:·7 | 00040b70:·736c·6f67·2e63·6f6e·6622·0a23·202a·2041··slog.conf".#·*·A | ||
| 00040b80:·6 | 00040b80:·6e64·2061·6c73·6f20·7468·6520·6c6f·6720··nd·also·the·log· | ||
| 00040b90:·6 | 00040b90:·6669·6c65·2070·6174·6873·206c·6973·7465··file·paths·liste | ||
| 00040ba0:· | 00040ba0:·6420·6166·7465·7220·7273·7973·6c6f·6727··d·after·rsyslog' | ||
| 00040bb0:·73 | 00040bb0:·7320·2449·6e63·6c75·6465·436f·6e66·6967··s·$IncludeConfig | ||
| 00040bc0:· | 00040bc0:·2064·6972·6563·7469·7665·0a23·2020·2028···directive.#···( | ||
| 00040bd0:· | 00040bd0:·7374·6f72·6520·7468·6520·7265·7375·6c74··store·the·result | ||
| 00040be0:· | 00040be0:·2069·6e74·6f20·6172·7261·7920·666f·7220···into·array·for· | ||
| 00040bf0:· | 00040bf0:·7468·6520·6361·7365·2074·6865·7265·2773··the·case·there's | ||
| 00040c00:· | 00040c00:·2073·6865·6c6c·2067·6c6f·6220·7573·6564···shell·glob·used | ||
| 00040c10:· | 00040c10:·2061·7320·7661·6c75·6520·6f66·2049·6e63···as·value·of·Inc | ||
| 00040c20:·6 | 00040c20:·6c75·6465·436f·6e66·6967·290a·7265·6164··ludeConfig).read | ||
| 00040c30:· | 00040c30:·6172·7261·7920·2d74·204f·4c44·5f49·4e43··array·-t·OLD_INC | ||
| 00040c40:· | 00040c40:·2026·6c74·3b20·266c·743b·2867·7265·7020···<·<(grep· | ||
| 00040c50:· | 00040c50:·2d65·2022·5c24·496e·636c·7564·6543·6f6e··-e·"\$IncludeCon | ||
| 00040c60:· | 00040c60:·6669·675b·5b3a·7370·6163·653a·5d5d·5c2b··fig[[:space:]]\+ | ||
| 00040c70:· | 00040c70:·5b5e·5b3a·7370·6163·653a·5d3b·5d5c·2b22··[^[:space:];]\+" | ||
| 00040c80:· | 00040c80:·202f·6574·632f·7273·7973·6c6f·672e·636f···/etc/rsyslog.co | ||
| 00040c90:· | 00040c90:·6e66·207c·2063·7574·202d·6420·2720·2720··nf·|·cut·-d·'·'· | ||
| 00040ca0:·2 | 00040ca0:·2d66·2032·290a·7265·6164·6172·7261·7920··-f·2).readarray· | ||
| 00040cb0:·2d | 00040cb0:·2d74·2052·5359·534c·4f47·5f49·4e43·4c55··-t·RSYSLOG_INCLU | ||
| 00040cc0:· | 00040cc0:·4445·5f43·4f4e·4649·4720·266c·743b·2026··DE_CONFIG·<·& | ||
| 00040cd0:· | 00040cd0:·6c74·3b28·666f·7220·494e·4350·4154·4820··lt;(for·INCPATH· | ||
| 00040ce0:· | 00040ce0:·696e·2022·247b·4f4c·445f·494e·435b·405d··in·"${OLD_INC[@] | ||
| 00040cf0:· | 00040cf0:·7d22·3b20·646f·2065·7661·6c20·7072·696e··}";·do·eval·prin | ||
| 00040d00:· | 00040d00:·7466·2027·2573·5c5c·6e27·2022·247b·494e··tf·'%s\\n'·"${IN | ||
| 00040d10:· | 00040d10:·4350·4154·487d·223b·2064·6f6e·6529·0a72··CPATH}";·done).r | ||
| 00040d20:· | 00040d20:·6561·6461·7272·6179·202d·7420·4e45·575f··eadarray·-t·NEW_ | ||
| 00040d30:· | 00040d30:·494e·4320·266c·743b·2026·6c74·3b28·7365··INC·<·<(se | ||
| 00040d40:· | 00040d40:·6420·2d6e·2027·2f5e·5c73·2a69·6e63·6c75··d·-n·'/^\s*inclu | ||
| 00040d50:· | 00040d50:·6465·282f·2c2f·292f·4970·2720·2f65·7463··de(/,/)/Ip'·/etc | ||
| 00040d60:· | 00040d60:·2f72·7379·736c·6f67·2e63·6f6e·6620·7c20··/rsyslog.conf·|· | ||
| 00040d70:· | 00040d70:·7365·6420·2d6e·2027·7340·2e2a·6669·6c65··sed·-n·'s@.*file | ||
| 00040d80:· | 00040d80:·5c73·2a3d·5c73·2a22·5c28·5b2f·5b3a·616c··\s*=\s*"\([/[:al | ||
| 00040d90:·6 | 00040d90:·6e75·6d3a·5d5b·3a70·756e·6374·3a5d·5d2a··num:][:punct:]]* | ||
| 00040da0:· | 00040da0:·5c29·222e·2a40·5c31·4049·7027·290a·7265··\)".*@\1@Ip').re | ||
| 00040db0:·6 | 00040db0:·6164·6172·7261·7920·2d74·2052·5359·534c··adarray·-t·RSYSL | ||
| 00040dc0:· | 00040dc0:·4f47·5f49·4e43·4c55·4445·2026·6c74·3b20··OG_INCLUDE·<· | ||
| 00040dd0:·2 | 00040dd0:·266c·743b·2866·6f72·2049·4e43·5041·5448··<(for·INCPATH | ||
| 00040de0:· | 00040de0:·2069·6e20·2224·7b4e·4557·5f49·4e43·5b40···in·"${NEW_INC[@ | ||
| 00040df0:· | 00040df0:·5d7d·223b·2064·6f20·6576·616c·2070·7269··]}";·do·eval·pri | ||
| 00040e00:· | 00040e00:·6e74·6620·2725·735c·5c6e·2720·2224·7b49··ntf·'%s\\n'·"${I | ||
| 00040e10:· | 00040e10:·4e43·5041·5448·7d22·3b20·646f·6e65·290a··NCPATH}";·done). | ||
| 00040e20:·2 | 00040e20:·0a23·2044·6563·6c61·7265·2061·6e20·6172··.#·Declare·an·ar | ||
| 00040e30:· | 00040e30:·7261·7920·746f·2068·6f6c·6420·7468·6520··ray·to·hold·the· | ||
| 00040e40:· | 00040e40:·6669·6e61·6c20·6c69·7374·206f·6620·6469··final·list·of·di | ||
| 00040e50:·6 | 00040e50:·6666·6572·656e·7420·6c6f·6720·6669·6c65··fferent·log·file | ||
| 00040e60:· | 00040e60:·2070·6174·6873·0a64·6563·6c61·7265·202d···paths.declare·- | ||
| 00040e70:·6 | 00040e70:·6120·4c4f·475f·4649·4c45·5f50·4154·4853··a·LOG_FILE_PATHS | ||
| 00040e80:· | 00040e80:·0a0a·2320·4172·7261·7920·746f·2068·6f6c··..#·Array·to·hol | ||
| 00040e90:·64 | 00040e90:·6420·616c·6c20·7273·7973·6c6f·6720·636f··d·all·rsyslog·co | ||
| 00040ea0:· | 00040ea0:·6e66·6967·2065·6e74·7269·6573·0a52·5359··nfig·entries.RSY | ||
| 00040eb0:· | 00040eb0:·534c·4f47·5f43·4f4e·4649·4753·3d28·290a··SLOG_CONFIGS=(). | ||
| 00040ec0:· | 00040ec0:·5253·5953·4c4f·475f·434f·4e46·4947·533d··RSYSLOG_CONFIGS= | ||
| 00040ed0:· | 00040ed0:·2822·247b·5253·5953·4c4f·475f·4554·435f··("${RSYSLOG_ETC_ | ||
| 00040ee0:· | 00040ee0:·434f·4e46·4947·7d22·2022·247b·5253·5953··CONFIG}"·"${RSYS | ||
| 00040ef0:· | 00040ef0:·4c4f·475f·494e·434c·5544·455f·434f·4e46··LOG_INCLUDE_CONF | ||
| 00040f00:· | 00040f00:·4947·5b40·5d7d·2220·2224·7b52·5359·534c··IG[@]}"·"${RSYSL | ||
| 00040f10:· | 00040f10:·4f47·5f49·4e43·4c55·4445·5b40·5d7d·2229··OG_INCLUDE[@]}") | ||
| 00040f20:· | 00040f20:·0a0a·2320·4765·7420·6675·6c6c·206c·6973··..#·Get·full·lis | ||
| 00040f30:· | 00040f30:·7420·6f66·2066·696c·6573·2074·6f20·6265··t·of·files·to·be | ||
| 00040f40:· | 00040f40:·2063·6865·636b·6564·0a23·2052·5359·534c···checked.#·RSYSL | ||
| 00040f50:· | 00040f50:·4f47·5f43·4f4e·4649·4753·206d·6179·2063··OG_CONFIGS·may·c | ||
| 00040f60:·6 | 00040f60:·6f6e·7461·696e·2067·6c6f·6273·2073·7563··ontain·globs·suc | ||
| 00040f70:· | 00040f70:·6820·6173·0a23·202f·6574·632f·7273·7973··h·as.#·/etc/rsys | ||
| 00040f80:·6 | 00040f80:·6c6f·672e·642f·2a2e·636f·6e66·202f·6574··log.d/*.conf·/et | ||
| 00040f90:· | 00040f90:·632f·7273·7973·6c6f·672e·642f·2a2e·6672··c/rsyslog.d/*.fr | ||
| 00040fa0:· | 00040fa0:·756c·650a·2320·536f·2c20·6c6f·6f70·206f··ule.#·So,·loop·o | ||
| 00040fb0:· | 00040fb0:·7665·7220·7468·6520·656e·7472·6965·7320··ver·the·entries· | ||
| 00040fc0:· | 00040fc0:·696e·2052·5359·534c·4f47·5f43·4f4e·4649··in·RSYSLOG_CONFI | ||
| 00040fd0:· | 00040fd0:·4753·2061·6e64·2075·7365·2066·696e·6420··GS·and·use·find· | ||
| 00040fe0:·4 | 00040fe0:·746f·2067·6574·2074·6865·206c·6973·7420··to·get·the·list· | ||
| 00040ff0:· | 00040ff0:·6f66·2069·6e63·6c75·6465·6420·6669·6c65··of·included·file | ||
| 00041000:· | 00041000:·732e·0a52·5359·534c·4f47·5f43·4f4e·4649··s..RSYSLOG_CONFI | ||
| 00041010:· | 00041010:·475f·4649·4c45·533d·2829·0a66·6f72·2045··G_FILES=().for·E | ||
| 00041020:· | 00041020:·4e54·5259·2069·6e20·2224·7b52·5359·534c··NTRY·in·"${RSYSL | ||
| 00041030:· | 00041030:·4f47·5f43·4f4e·4649·4753·5b40·5d7d·220a··OG_CONFIGS[@]}". | ||
| 00041040:· | 00041040:·646f·0a09·2320·4966·2064·6972·6563·746f··do..#·If·directo | ||
| 00041050:· | 00041050:·7279·2c20·7273·7973·6c6f·6720·7769·6c6c··ry,·rsyslog·will | ||
| 00041060:· | 00041060:·2073·6561·7263·6820·666f·7220·636f·6e66···search·for·conf | ||
| Max diff block lines reached; 1049836/1151872 bytes (91.14%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·22.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·22.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 289, 14 lines modified | Offset 289, 137 lines modified | ||
| 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 290 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 290 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 298 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 299 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 300 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 301 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 302 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 303 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 304 | of·IncludeConfig) | ||
| 305 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+"·/ | ||
| 306 | etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 307 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 308 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 309 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed·- | ||
| 310 | n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 311 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 312 | '%s\\n'·"${INCPATH}";·done) | ||
| 313 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 314 | declare·-a·LOG_FILE_PATHS | ||
| 315 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 316 | RSYSLOG_CONFIGS=() | ||
| 317 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 318 | {RSYSLOG_INCLUDE[@]}") | ||
| 319 | #·Get·full·list·of·files·to·be·checked | ||
| 320 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 321 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 322 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 323 | included·files. | ||
| 324 | RSYSLOG_CONFIG_FILES=() | ||
| 325 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 326 | do | ||
| 327 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 328 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 329 | » if·[·-d·"${ENTRY}"·] | ||
| 330 | » then | ||
| 331 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 332 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 333 | » elif·[·-f·"${ENTRY}"·] | ||
| 334 | » then | ||
| 335 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 336 | » else | ||
| 337 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 338 | » fi | ||
| 339 | done | ||
| 340 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 341 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default·configuration) | ||
| 342 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 343 | do | ||
| 344 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 345 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 346 | ('$')·characters, | ||
| 347 | » #·*·Ignore·empty·lines, | ||
| 348 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 349 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 350 | not·log·files | ||
| 351 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 352 | path | ||
| 353 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 354 | all·of·the | ||
| 355 | » #·following·are·met: | ||
| 356 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 357 | » #·*·it·is·preceded·by·space | ||
| 358 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';')·characters | ||
| 359 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 360 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 361 | » then | ||
| 362 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 363 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 364 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 365 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 366 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 367 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 368 | {FILTERED_PATHS}") | ||
| 369 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 370 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 371 | newline),·split | ||
| 372 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 373 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 374 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 375 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 376 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 377 | » » #·Delete·the·temporary·array | ||
| 378 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 379 | » fi | ||
| 380 | done | ||
| 381 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so·grep | ||
| 382 | regex·is·a·bit | ||
| 383 | #·curly: | ||
| 384 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 385 | #·extract·File="logfile"·expression | ||
| 386 | #·match·only·"logfile"·expression | ||
| 387 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 388 | do | ||
| 389 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 390 | "${LOG_FILE}") | ||
| 391 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 392 | alnum:][:punct:]]*)\"\s*\)") | ||
| 393 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| Max diff block lines reached; 140293/146903 bytes (95.50%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d90:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037da0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037da0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037db0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037db0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037dc0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037dc0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037dd0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037dd0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037de0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037de0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037df0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037df0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037e00:·2032·3032·342d·3131·2d30·3 | 00037e00:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 00037e10:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037e10:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037e20:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037e20:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e30:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e30:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e40:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e40:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e50:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e50:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e60:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e60:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e70:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e70:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15065, 169 lines modified | Offset 15065, 169 lines modified | ||
| 0003ad80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ad80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ad90:·6964·6d32·3930·3222·2074·6162·696e·6465··idm2902"·tabinde | 0003ad90:·6964·6d32·3930·3222·2074·6162·696e·6465··idm2902"·tabinde | ||
| 0003ada0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ada0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003adb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003adb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003adc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003adc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003add0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003add0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ade0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ade0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003adf0:·656d·6564·6961·7469·6f6e·20 | 0003adf0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003ae00:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003ae10:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ae20:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ae30:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ae40:·6d32·3930·3222·3e3c·7461·626c·6520·636c··m2902"><table·cl | |||
| 0003ae50:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ae00:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003ae10:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ae20:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ae30:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ae40:·646d·3239·3032·223e·3c74·6162·6c65·2063··dm2902"><table·c | |||
| 0003ae50:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ae60:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ae | 0003ae60:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003ae70:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ae80:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ae90:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003aea0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003aeb0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003aec0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ae80:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ae90:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003aea0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003aeb0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003aec0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003aed0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003aee0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003aef0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003af00:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003af10:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003a | 0003aed0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003aee0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003af30:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003af40:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003af50:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003af60:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003af70:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003af80:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003af90:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003afa0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003afb0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003afc0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003afd0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003afe0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003aff0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b000:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b010:·5449·472d·5542·5455·2d32·322d·3635·3130··TIG-UBTU-22-6510 | |||
| 0003b020:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b030:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b040:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b050:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b060:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b070:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b080:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b090:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b0a0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b0b0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b0c0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b0d0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b0e0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b0f0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b100:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b110:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b120:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b130:·6765·743d·2223·6964·6d32·3930·3322·2074··get="#idm2903"·t | |||
| 0003b140:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b150:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b160:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b170:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b180:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b190:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b1a0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b1b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b1d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b1e0:·6964·3d22·6964·6d32·3930·3322·3e3c·7461··id="idm2903"><ta | |||
| 0003b1f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b200:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b210:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b220:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b230:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b240:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b250:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b260:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b270:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b280:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b290:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b2a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b2b0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003 | 0003aef0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003af00:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003af10:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003af20:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003af30:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003af40:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003af50:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003af60:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003af70:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003af80:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003af90:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b2d0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b2e0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b2f0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| Max diff block lines reached; 17604038/17627138 bytes (99.87%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·22.04·LTS·Security·Technical·Implementation | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·22.04·LTS·Security·Technical·Implementation |
| 42 | ··············Guide·(STIG)·V1R1 | 42 | ··············Guide·(STIG)·V1R1 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 45 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 113, 66 lines modified | Offset 113, 66 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 117 | ············_\x8c_\x8i_\x8s············1.3.1 | 117 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | -·name:·Ensure·aide·is·installed | ||
| 126 | ··package: | ||
| 127 | ····name:·aide | ||
| 128 | ····state:·present | ||
| 129 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 130 | ··tags: | ||
| 131 | ··-·CJIS-5.10.1.3 | ||
| 132 | ··-·DISA-STIG-UBTU-22-651010 | ||
| 133 | ··-·NIST-800-53-CM-6(a) | ||
| 134 | ··-·PCI-DSS-Req-11.5 | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | ||
| 136 | ··-·enable_strategy | ||
| 137 | ··-·low_complexity | ||
| 138 | ··-·low_disruption | ||
| 139 | ··-·medium_severity | ||
| 140 | ··-·no_reboot_needed | ||
| 141 | ··-·package_aide_installed | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | include·install_aide | 125 | include·install_aide |
| 148 | class·install_aide·{ | 126 | class·install_aide·{ |
| 149 | ··package·{·'aide': | 127 | ··package·{·'aide': |
| 150 | ····ensure·=>·'installed', | 128 | ····ensure·=>·'installed', |
| 151 | ··} | 129 | ··} |
| 152 | } | 130 | } |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 136 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 164 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 138 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 165 | else | 139 | else |
| 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 167 | fi | 141 | fi |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | -·name:·Ensure·aide·is·installed | ||
| 152 | ··package: | ||
| 153 | ····name:·aide | ||
| 154 | ····state:·present | ||
| 155 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 156 | ··tags: | ||
| 157 | ··-·CJIS-5.10.1.3 | ||
| 158 | ··-·DISA-STIG-UBTU-22-651010 | ||
| 159 | ··-·NIST-800-53-CM-6(a) | ||
| 160 | ··-·PCI-DSS-Req-11.5 | ||
| 161 | ··-·PCI-DSSv4-11.5.2 | ||
| 162 | ··-·enable_strategy | ||
| 163 | ··-·low_complexity | ||
| 164 | ··-·low_disruption | ||
| 165 | ··-·medium_severity | ||
| 166 | ··-·no_reboot_needed | ||
| 167 | ··-·package_aide_installed | ||
| 168 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 168 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 169 | Run·the·following·command·to·generate·a·new·database: | 169 | Run·the·following·command·to·generate·a·new·database: |
| 170 | $·sudo·aideinit | 170 | $·sudo·aideinit |
| 171 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 171 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 172 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 172 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 173 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 173 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 174 | generated·database·can·be·installed·as·follows: | 174 | generated·database·can·be·installed·as·follows: |
| Offset 197, 14 lines modified | Offset 197, 40 lines modified | ||
| 197 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 197 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 198 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 198 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 200 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 200 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 201 | ············_\x8c_\x8i_\x8s············1.3.1 | 201 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 202 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 202 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 203 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 203 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 205 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 206 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 207 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 208 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 209 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 210 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| Max diff block lines reached; 1223042/1229150 bytes (99.50%) of diff not shown. | |||
| Offset 3, 5062 lines modified | Offset 3, 5174 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_noexec_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Ensure·Privileged·Escalated·Commands·Cannot·Execute·Other·Commands·-·sudo·NOEXEC</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_noexec_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-package_cron_installed_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Install·the·cron·service</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-package_cron_installed_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Enable·different·security·models</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_syslog_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_mac_modification_usr_share_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Record·Events·that·Modify·the·System's·Mandatory·Access·Controls·in·usr/share</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_mac_modification_usr_share_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-k | 34 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_full_action_stig_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Configure·auditd·Disk·Full·Action·when·Disk·Space·Is·Full</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-k | 37 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_disk_full_action_stig_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_ | 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_pubkey_auth_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Disable· | 41 | ······<ocil:title>Disable·PubkeyAuthentication·Authentication</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_ | 43 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_pubkey_auth_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-a | 46 | ····<ocil:questionnaire·id="ocil:ssg-auditd_freq_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Set·number·of·records·to·cause·an·explicit·flush·to·audit·logs</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-a | 49 | ········<ocil:test_action_ref>ocil:ssg-auditd_freq_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-sudo_ | 52 | ····<ocil:questionnaire·id="ocil:ssg-sudo_remove_nopasswd_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Ensure· | 53 | ······<ocil:title>Ensure·Users·Re-Authenticate·for·Privilege·Escalation·-·sudo·NOPASSWD</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-sudo_ | 55 | ········<ocil:test_action_ref>ocil:ssg-sudo_remove_nopasswd_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_unmap_kernel_at_el0_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Unmap·kernel·when·running·in·userspace·(aka·KAISER)</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_unmap_kernel_at_el0_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_binary_dirs_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Verify·that·System·Executables·Have·Root·Ownership</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_shared_media_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_messages_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Verify·Group·Who·Owns·/var/log/messages·File</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_var_log_messages_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_removexattr_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·removexattr</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_removexattr_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-package_openldap-clients_removed_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·LDAP·client·is·not·installed</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-package_openldap-clients_removed_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_proc_kcore_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_passwd_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Verify·Group·Who·Owns·Backup·passwd·File</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Verify·Permissions·on·Backup·gshadow·File</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_tcp_forwarding_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Disable·SSH·TCP·Forwarding</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-sshd_ | 103 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_tcp_forwarding_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-package_chrony_installed_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>The·Chrony·package·is·installed</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-package_chrony_installed_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_sha512_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-accounts_no_uid_except_zero_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Verify·Only·Root·Has·UID·0</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-accounts_no_uid_except_zero_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_warn_age_login_defs_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_action_stig_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Configure·auditd·max_log_file_action·Upon·Reaching·Maximum·Log·Size</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-a | 121 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_max_log_file_action_stig_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_library_dirs_ocil:questionnaire:1"> | ||
| Max diff block lines reached; 664094/676858 bytes (98.11%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 77, 85 lines modified | Offset 77, 85 lines modified | ||
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="package_pam"> | 79 | ····<cpe-lang:platform·id="package_pam"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | ||
| 84 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 87 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 88 | ········</cpe-lang:logical-test> | ||
| 89 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 90 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 91 | ········</cpe-lang:logical-test> | ||
| 92 | ······</cpe-lang:logical-test> | ||
| 93 | ····</cpe-lang:platform> | ||
| 94 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | 89 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 90 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 91 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 92 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-p | 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 94 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 95 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="package_ | 96 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 97 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 99 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 100 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 101 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 102 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg- | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id="package_ | 106 | ····<cpe-lang:platform·id="package_sudo"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg- | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 116 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 118 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg- | 119 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 120 | ········</cpe-lang:logical-test> | ||
| 121 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 128 | ········<cpe-lang | 123 | ········</cpe-lang:logical-test> |
| 129 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="package_audit"> | 126 | ····<cpe-lang:platform·id="package_audit"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="package_c | 131 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 135 | ········</cpe-lang:logical-test> | ||
| 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 138 | ········</cpe-lang:logical-test> | ||
| 139 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="machine_and_package_ufw"> | 141 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 145 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id="package_sudo"> | ||
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 150 | ······</cpe-lang:logical-test> | ||
| 151 | ····</cpe-lang:platform> | ||
| 152 | ····<cpe-lang:platform·id="aarch64_arch"> | 147 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 150 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 151 | ········</cpe-lang:logical-test> | ||
| 152 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 153 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 154 | ········</cpe-lang:logical-test> | ||
| 155 | ······</cpe-lang:logical-test> | 155 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 157 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 159 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 160 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 160 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 161 | ········</cpe-lang:logical-test> | 161 | ········</cpe-lang:logical-test> |
| Offset 167, 62 lines modified | Offset 167, 62 lines modified | ||
| 167 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | 168 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 169 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 169 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 172 | ······</cpe-lang:logical-test> | 172 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 173 | ····</cpe-lang:platform> |
| 174 | ····<cpe-lang:platform·id="package_ | 174 | ····<cpe-lang:platform·id="package_systemd"> |
| 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 177 | ······</cpe-lang:logical-test> | 177 | ······</cpe-lang:logical-test> |
| 178 | ····</cpe-lang:platform> | 178 | ····</cpe-lang:platform> |
| 179 | ····<cpe-lang:platform·id=" | 179 | ····<cpe-lang:platform·id="machine"> |
| 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 1762254/1775399 bytes (99.26%) of diff not shown. | |||
| Offset 3, 4976 lines modified | Offset 3, 4925 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-auditd_local_events_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Include·Local·Events·in·Audit·Logs</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-auditd_local_events_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_gshadow_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·User·Who·Owns·gshadow·File</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_all_shadowed_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Verify·All·Account·Password·Hashes·are·Shadowed</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_all_shadowed_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-s | 28 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_kerb_auth_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Disable·Kerberos·Authentication</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-s | 31 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_kerb_auth_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_gshadow_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify· | 35 | ······<ocil:title>Verify·User·Who·Owns·Backup·gshadow·File</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-file_ | 37 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_info_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_passwd_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Verify·Group·Who·Owns·Backup·passwd·File</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_sshd_pub_key_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_mac_modification_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Record·Events·that·Modify·the·System's·Mandatory·Access·Controls</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_mac_modification_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-no_direct_root_logins_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_passwd_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Verify·Permissions·on·Backup·passwd·File</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmap_argument_absent_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_syslog_plugin_activated_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Configure·auditd·to·use·audispd's·syslog·plugin</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-auditd_audispd_syslog_plugin_activated_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-a | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_warn_age_login_defs_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Set·Password·Warning·Age</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-a | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_warn_age_login_defs_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_pub_key_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Verify·Permissions·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_sshd_pub_key_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_shadow_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Verify·Permissions·on·shadow·File</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-accounts_root_path_dirs_no_write_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-sshd_limit_user_access_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Limit·Users'·SSH·Access</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sshd_limit_user_access_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_rename_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_tipc_disabled_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable·TIPC·Support</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_tipc_disabled_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-package_gnutls-utils_installed_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount2</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount2_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-sudo_remove_no_authenticate_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_sg_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Enable·checks·on·scatter-gather·(SG)·table·operations</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_sg_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_x86_vsyscall_emulation_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_password_login_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable·SSH·root·Login·with·a·Password·(Insecure)</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_password_login_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-disable_host_auth_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Disable·Host-Based·Authentication</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-disable_host_auth_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_media_export_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Confi | 119 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Exporting·to·Media·(successful)</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| Max diff block lines reached; 700639/712891 bytes (98.28%) of diff not shown. | |||
| Offset 3, 9007 lines modified | Offset 3, 8861 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faillock_audit_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-package_vsftpd_removed_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Uninstall·vsftpd·Package</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-package_vsftpd_removed_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_at_allow_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Group·Who·Owns·/etc/at.allow·file</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_at_allow_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_d_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_icmp_echo_ignore_broadcasts_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Enable·Kernel·Parameter·to·Ignore·ICMP·Broadcast·Echo·Requests·on·IPv4·Interfaces</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_icmp_echo_ignore_broadcasts_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_tally2_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Set·Deny·For·Failed·Password·Attempts</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_tally2_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify·Group·Who·Owns·/var/log·Directory</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_var_log_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-group_ | 40 | ····<ocil:questionnaire·id="ocil:ssg-dir_group_ownership_library_dirs_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Verify·that·Shared·Library·Directories·Have·Root·Group·Ownership</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-group_ | 43 | ········<ocil:test_action_ref>ocil:ssg-dir_group_ownership_library_dirs_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_open_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure·/var·Located·On·Separate·Partition</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-a | 49 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-dir_permissions_binary_dirs_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Verify·that·System·Executable·Directories·Have·Restrictive·Permissions</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-dir_permissions_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-zipl_audit_argument_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Enable·Auditing·to·Start·Prior·to·the·Audit·Daemon·in·zIPL</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-zipl_audit_argument_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_protected_symlinks_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>En | 65 | ······<ocil:title>Enable·Kernel·Parameter·to·Enforce·DAC·on·Symlinks</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_protected_symlinks_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-accounts_tmout_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Set·Interactive·Session·Timeout</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-accounts_tmout_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-grub2_uefi_password_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Set·the·UEFI·Boot·Loader·Password</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-grub2_uefi_password_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-set_iptables_default_rule_forward_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_login_banner_text_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Set·the·GNOME3·Login·Warning·Banner·Text</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-dconf_gnome_login_banner_text_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-a | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_login_events_tallylog_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Record·Attempts·to·Alter·Logon·and·Logout·Events·-·tallylog</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-a | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_login_events_tallylog_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-di | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_sudo_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·sudo</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-di | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_sudo_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-prefer_64bit_os_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Prefer·to·use·a·64-bit·Operating·System·when·supported</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-prefer_64bit_os_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-set_ipv6_loopback_traffic_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Set·configuration·for·IPv6·loopback·traffic</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-set_ipv6_loopback_traffic_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_hibernation_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Disable·hibernation</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_hibernation_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-s | 118 | ····<ocil:questionnaire·id="ocil:ssg-disable_ctrlaltdel_burstaction_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Disable·Ctrl-Alt-Del·Burst·Action</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-s | 121 | ········<ocil:test_action_ref>ocil:ssg-disable_ctrlaltdel_burstaction_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_screensaver_lock_enabled_ocil:questionnaire:1"> | ||
| Max diff block lines reached; 1363839/1376711 bytes (99.07%) of diff not shown. | |||
| Offset 3, 8528 lines modified | Offset 3, 8528 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-package_talk_removed_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure·Rsyslog·Authenticates·Off-Loaded·Audit·Records</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdriverauthmode_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lsetxattr_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-package_iptables-persistent_installed_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Install·iptables-persistent·Package</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-a | 19 | ········<ocil:test_action_ref>ocil:ssg-package_iptables-persistent_installed_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_settimeofday_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Record·attempts·to·alter·time·through·settimeofday</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_settimeofday_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_login_events_faillock_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Record·Attempts·to·Alter·Logon·and·Logout·Events·-·faillock</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_login_events_faillock_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_issue_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify· | 35 | ······<ocil:title>Verify·ownership·of·System·Login·Banner</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_issue_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-package_squid_removed_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_syslog_plugin_activated_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Configure·auditd·to·use·audispd's·syslog·plugin</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-auditd_audispd_syslog_plugin_activated_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-package_iptables_installed_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Install·iptables·Package</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-package_iptables_installed_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-service_sshd_enabled_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Enable·the·OpenSSH·Service</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-service_sshd_enabled_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_log_noexec_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_su_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·su</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_su_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_config_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_minimum_age_login_defs_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Set·Password·Minimum·Age</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_minimum_age_login_defs_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-no_ | 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_shared_media_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Configure·Sending·and·Accepting·Shared·Media·Redirects·for·All·IPv4·Interfaces</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-no_ | 73 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_shared_media_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-service_iptables_enabled_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Verify·iptables·Enabled</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-service_iptables_enabled_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-coredump_disable_storage_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Disable·storing·core·dump</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-coredump_disable_storage_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_mac_modification_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Res | 89 | ······<ocil:title>Record·Events·that·Modify·the·System's·Mandatory·Access·Controls</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_mac_modification_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_login_events_faillog_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>A | 95 | ······<ocil:title>Record·Attempts·to·Alter·Logon·and·Logout·Events·-·faillog</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_login_events_faillog_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_rds_disabled_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Disable·RDS·Support</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_rds_disabled_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_adjtimex_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Record· | 107 | ······<ocil:title>Record·attempts·to·alter·time·through·adjtimex</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_adjtimex_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_system_journal_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-smartcard_configure_cert_checking_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Configure·Smart·Card·Certificate·Status·Checking</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-smartcard_configure_cert_checking_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_reboot_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Ensure· | 119 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·reboot</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_reboot_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| Max diff block lines reached; 1424073/1436509 bytes (99.13%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····19 | 2 | -rw-r--r--···0········0········0·····1976·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··12 | 3 | -rw-r--r--···0········0········0··1229896·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037d20:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00037d20:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 16001, 146 lines modified | Offset 16001, 146 lines modified | ||
| 0003e800:·6172·6765·743d·2223·6964·6d31·3934·3022··arget="#idm1940" | 0003e800:·6172·6765·743d·2223·6964·6d31·3934·3022··arget="#idm1940" | ||
| 0003e810:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003e810:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003e820:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003e820:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003e830:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003e830:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003e840:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003e840:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003e850:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003e850:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003e860:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003e860:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003e870:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003e880:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003e890:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003e8a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003e8b0:·6964·3d22·6964·6d31·3934·3022·3e3c·7461··id="idm1940"><ta | |||
| 0003e8c0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003e8d0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003e8e0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003e8f0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003e900:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003e910:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003e920:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003e930:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003e940:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003e950:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003e960:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003e970:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003e980:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003e990:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003e9a0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003e9b0:·3e3c·636f·6465·3e0a·666f·7220·6620·696e··><code>.for·f·in | |||
| 0003e9c0:·202f·6574·632f·7375·646f·6572·7320·2f65···/etc/sudoers·/e | |||
| 0003e9d0:·7463·2f73·7564·6f65·7273·2e64·2f2a·203b··tc/sudoers.d/*·; | |||
| 0003e9e0:·2064·6f0a·2020·6966·205b·2021·202d·6520···do.··if·[·!·-e· | |||
| 0003e9f0:·2224·6622·205d·203b·2074·6865·6e0a·2020··"$f"·]·;·then.·· | |||
| 0003ea00:·2020·636f·6e74·696e·7565·0a20·2066·690a····continue.··fi. | |||
| 0003ea10:·2020·6d61·7463·6869·6e67·5f6c·6973·743d····matching_list= | |||
| 0003ea20:·2428·6772·6570·202d·5020·275e·283f·2123··$(grep·-P·'^(?!# | |||
| 0003ea30:·292e·2a5b·5c73·5d2b·5c21·6175·7468·656e··).*[\s]+\!authen | |||
| 0003ea40:·7469·6361·7465·2e2a·2427·2024·6620·7c20··ticate.*$'·$f·|· | |||
| 0003ea50:·756e·6971·2029·0a20·2069·6620·2120·7465··uniq·).··if·!·te | |||
| 0003ea60:·7374·202d·7a20·2224·6d61·7463·6869·6e67··st·-z·"$matching | |||
| 0003ea70:·5f6c·6973·7422·3b20·7468·656e·0a20·2020··_list";·then.··· | |||
| 0003ea80:·2077·6869·6c65·2049·4653·3d20·7265·6164···while·IFS=·read | |||
| 0003ea90:·202d·7220·656e·7472·793b·2064·6f0a·2020···-r·entry;·do.·· | |||
| 0003eaa0:·2020·2020·2320·636f·6d6d·656e·7420·6f75······#·comment·ou | |||
| 0003eab0:·7420·2221·6175·7468·656e·7469·6361·7465··t·"!authenticate | |||
| 0003eac0:·2220·6d61·7463·6865·7320·746f·2070·7265··"·matches·to·pre | |||
| 0003ead0:·7365·7276·6520·7573·6572·2064·6174·610a··serve·user·data. | |||
| 0003eae0:·2020·2020·2020·7365·6420·2d69·2022·732f········sed·-i·"s/ | |||
| 0003eaf0:·5e24·7b65·6e74·7279·7d24·2f23·2026·616d··^${entry}$/#·&am | |||
| 0003eb00:·703b·2f67·2220·2466·0a20·2020·2064·6f6e··p;/g"·$f.····don | |||
| 0003eb10:·6520·266c·743b·266c·743b·266c·743b·2022··e·<<<·" | |||
| 0003eb20:·246d·6174·6368·696e·675f·6c69·7374·220a··$matching_list". | |||
| 0003eb30:·0a20·2020·202f·7573·722f·7362·696e·2f76··.····/usr/sbin/v | |||
| 0003eb40:·6973·7564·6f20·2d63·6620·2466·2026·616d··isudo·-cf·$f·&am | |||
| 0003eb50:·703b·2667·743b·202f·6465·762f·6e75·6c6c··p;>·/dev/null | |||
| 0003eb60:·207c·7c20·6563·686f·2022·4661·696c·2074···||·echo·"Fail·t | |||
| 0003eb70:·6f20·7661·6c69·6461·7465·2024·6620·7769··o·validate·$f·wi | |||
| 0003eb80:·7468·2076·6973·7564·6f22·0a20·2066·690a··th·visudo".··fi. | |||
| 0003eb90:·646f·6e65·0a3c·2f63·6f64·653e·3c2f·7072··done.</code></pr | |||
| 0003eba0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ebb0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003ebc0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003ebd0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003ebe0:·6172·6765·743d·2223·6964·6d31·3934·3122··arget="#idm1941" | |||
| 0003ebf0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003ec00:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003ec10:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003ec20:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003ec30:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003ec40:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003e | 0003ec50:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003e | 0003ec60:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003e | 0003ec70:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003e | 0003ec80:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003e8b0:·6522·2069·643d·2269·646d·3139·3430·223e··e"·id="idm1940"> | |||
| 0003e8c0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003e8d0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003e8e0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003e8f0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003e900:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003e910:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003e920:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e930:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003e940:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003e950:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003e960:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003e970:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003e980:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003e990:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003e9a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003e9b0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003e9c0:·3a20·4669·6e64·202f·6574·632f·7375·646f··:·Find·/etc/sudo | |||
| 0003e9d0:·6572·732e·642f·2066·696c·6573·0a20·2061··ers.d/·files.··a | |||
| 0003e9e0:·6e73·6962·6c65·2e62·7569·6c74·696e·2e66··nsible.builtin.f | |||
| 0003e9f0:·696e·643a·0a20·2020·2070·6174·6873·3a0a··ind:.····paths:. | |||
| 0003ea00:·2020·2020·2d20·2f65·7463·2f73·7564·6f65······-·/etc/sudoe | |||
| 0003ea10:·7273·2e64·2f0a·2020·7265·6769·7374·6572··rs.d/.··register | |||
| 0003ea20:·3a20·7375·646f·6572·730a·2020·7461·6773··:·sudoers.··tags | |||
| 0003ea30:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 0003ea40:·332d·434d·2d36·2861·290a·2020·2d20·4e49··3-CM-6(a).··-·NI | |||
| 0003ea50:·5354·2d38·3030·2d35·332d·4941·2d31·310a··ST-800-53-IA-11. | |||
| 0003ea60:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003ea70:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003ea80:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003ea90:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003eaa0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003eab0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003eac0:·7465·6779·0a20·202d·2073·7564·6f5f·7265··tegy.··-·sudo_re | |||
| 0003ead0:·6d6f·7665·5f6e·6f5f·6175·7468·656e·7469··move_no_authenti | |||
| 0003eae0:·6361·7465·0a0a·2d20·6e61·6d65·3a20·5265··cate..-·name:·Re | |||
| 0003eaf0:·6d6f·7665·206c·696e·6573·2063·6f6e·7461··move·lines·conta | |||
| 0003eb00:·696e·696e·6720·2161·7574·6865·6e74·6963··ining·!authentic | |||
| Max diff block lines reached; 987404/1007330 bytes (98.02%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:11 | 41 | ····*·cpe:/o:debian:debian_linux:11 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 227, 14 lines modified | Offset 227, 35 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Find·/etc/sudoers.d/·files | 258 | -·name:·Find·/etc/sudoers.d/·files |
| 240 | ··ansible.builtin.find: | 259 | ··ansible.builtin.find: |
| Offset 265, 35 lines modified | Offset 286, 14 lines modified | ||
| 265 | ··-·NIST-800-53-IA-11 | 286 | ··-·NIST-800-53-IA-11 |
| 266 | ··-·low_complexity | 287 | ··-·low_complexity |
| 267 | ··-·low_disruption | 288 | ··-·low_disruption |
| 268 | ··-·medium_severity | 289 | ··-·medium_severity |
| 269 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 270 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 271 | ··-·sudo_remove_no_authenticate | 292 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 297 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 14 lines modified | Offset 314, 35 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Find·/etc/sudoers.d/·files | 345 | -·name:·Find·/etc/sudoers.d/·files |
| 327 | ··ansible.builtin.find: | 346 | ··ansible.builtin.find: |
| Offset 352, 35 lines modified | Offset 373, 14 lines modified | ||
| 352 | ··-·NIST-800-53-IA-11 | 373 | ··-·NIST-800-53-IA-11 |
| 353 | ··-·low_complexity | 374 | ··-·low_complexity |
| 354 | ··-·low_disruption | 375 | ··-·low_disruption |
| Max diff block lines reached; 121823/127556 bytes (95.51%) of diff not shown. | |||
| Offset 14286, 15 lines modified | Offset 14286, 15 lines modified | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d40:·3131·2d30·3 | 00037d40:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 16021, 146 lines modified | Offset 16021, 146 lines modified | ||
| 0003e940:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 0003e940:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 0003e950:·3934·3022·2074·6162·696e·6465·783d·2230··940"·tabindex="0 | 0003e950:·3934·3022·2074·6162·696e·6465·783d·2230··940"·tabindex="0 | ||
| 0003e960:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003e960:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003e970:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003e970:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003e980:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003e980:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003e990:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003e990:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003e9a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003e9a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003e9b0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003e9c0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003e9d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003e9e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003e9f0:·7365·2220·6964·3d22·6964·6d31·3934·3022··se"·id="idm1940" | |||
| 0003ea00:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003ea10:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ea20:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ea30:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ea40:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ea50:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ea60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ea70:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ea80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ea90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003eaa0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003eab0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003eac0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003ead0:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 0003eae0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003eaf0:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 0003eb00:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 0003eb10:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 0003eb20:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 0003eb30:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 0003eb40:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 0003eb50:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 0003eb60:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 0003eb70:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 0003eb80:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 0003eb90:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 0003eba0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 0003ebb0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 0003ebc0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 0003ebd0:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 0003ebe0:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 0003ebf0:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 0003ec00:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 0003ec10:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 0003ec20:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 0003ec30:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 0003ec40:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 0003ec50:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 0003ec60:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 0003ec70:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 0003ec80:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 0003ec90:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 0003eca0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 0003ecb0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 0003ecc0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 0003ecd0:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 0003ece0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ecf0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ed00:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ed10:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ed20:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0003ed30:·3934·3122·2074·6162·696e·6465·783d·2230··941"·tabindex="0 | |||
| 0003ed40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003ed50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003ed60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003ed70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ed80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003e | 0003ed90:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003e | 0003eda0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003e | 0003edb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003e | 0003edc0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003e | 0003edd0:·6c61·7073·6522·2069·643d·2269·646d·3139··lapse"·id="idm19 | ||
| 0003ea00:·3430·223e·3c74·6162·6c65·2063·6c61·7373··40"><table·class | |||
| 0003ea10:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ea20:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ea30:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ea40:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ea50:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ea60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ea70:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ea80:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003ea90:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003eaa0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003eab0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003eac0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003ead0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 0003eae0:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 0003eaf0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003eb00:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | |||
| 0003eb10:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | |||
| 0003eb20:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 0003eb30:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | |||
| 0003eb40:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | |||
| 0003eb50:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | |||
| 0003eb60:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | |||
| 0003eb70:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 0003eb80:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003eb90:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | |||
| 0003eba0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | |||
| 0003ebb0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003ebc0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003ebd0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003ebe0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003ebf0:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | |||
| 0003ec00:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | |||
| 0003ec10:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | |||
| 0003ec20:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | |||
| 0003ec30:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | |||
| 0003ec40:·6f6e·7461·696e·696e·6720·2161·7574·6865··ontaining·!authe | |||
| Max diff block lines reached; 1120162/1140088 bytes (98.25%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:11 | 42 | ····*·cpe:/o:debian:debian_linux:11 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 231, 14 lines modified | Offset 231, 35 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 243 | -·name:·Find·/etc/sudoers.d/·files | 262 | -·name:·Find·/etc/sudoers.d/·files |
| 244 | ··ansible.builtin.find: | 263 | ··ansible.builtin.find: |
| Offset 269, 35 lines modified | Offset 290, 14 lines modified | ||
| 269 | ··-·NIST-800-53-IA-11 | 290 | ··-·NIST-800-53-IA-11 |
| 270 | ··-·low_complexity | 291 | ··-·low_complexity |
| 271 | ··-·low_disruption | 292 | ··-·low_disruption |
| 272 | ··-·medium_severity | 293 | ··-·medium_severity |
| 273 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 275 | ··-·sudo_remove_no_authenticate | 296 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 303 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 14 lines modified | Offset 318, 35 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Find·/etc/sudoers.d/·files | 349 | -·name:·Find·/etc/sudoers.d/·files |
| 331 | ··ansible.builtin.find: | 350 | ··ansible.builtin.find: |
| Offset 356, 35 lines modified | Offset 377, 14 lines modified | ||
| 356 | ··-·NIST-800-53-IA-11 | 377 | ··-·NIST-800-53-IA-11 |
| 357 | ··-·low_complexity | 378 | ··-·low_complexity |
| 358 | ··-·low_disruption | 379 | ··-·low_disruption |
| Max diff block lines reached; 137371/143109 bytes (95.99%) of diff not shown. | |||
| Offset 14279, 15 lines modified | Offset 14279, 15 lines modified | ||
| 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037cd0:·342d·3131·2d30·3 | 00037cd0:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 14776, 146 lines modified | Offset 14776, 146 lines modified | ||
| 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00039b80:·3934·3022·2074·6162·696e·6465·783d·2230··940"·tabindex="0 | 00039b80:·3934·3022·2074·6162·696e·6465·783d·2230··940"·tabindex="0 | ||
| 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039be0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00039bf0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00039c00:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039c10:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039c20:·7365·2220·6964·3d22·6964·6d31·3934·3022··se"·id="idm1940" | |||
| 00039c30:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039c40:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039c50:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039c60:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039c70:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039c80:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039c90:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039ca0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039cb0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039cc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039cd0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039ce0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039cf0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039d00:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 00039d10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039d20:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 00039d30:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 00039d40:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 00039d50:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 00039d60:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 00039d70:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 00039d80:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 00039d90:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 00039da0:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 00039db0:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 00039dc0:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 00039dd0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 00039de0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 00039df0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 00039e00:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 00039e10:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 00039e20:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 00039e30:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 00039e40:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 00039e50:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 00039e60:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 00039e70:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 00039e80:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 00039e90:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 00039ea0:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 00039eb0:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 00039ec0:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 00039ed0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 00039ee0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 00039ef0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 00039f00:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 00039f10:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f20:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f30:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f40:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f50:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 00039f60:·3934·3122·2074·6162·696e·6465·783d·2230··941"·tabindex="0 | |||
| 00039f70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039f80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039f90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fa0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039 | 00039fc0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 00039 | 00039fd0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039 | 00039fe0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039 | 00039ff0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00039c20:·6c61·7073·6522·2069·643d·2269·646d·3139··lapse"·id="idm19 | |||
| 00039c30:·3430·223e·3c74·6162·6c65·2063·6c61·7373··40"><table·class | |||
| 00039c40:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039c50:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00039c60:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00039c70:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039c80:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039c90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039ca0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039cb0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039cc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039cd0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039ce0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00039cf0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00039d00:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 00039d10:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 00039d20:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039d30:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | |||
| 00039d40:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | |||
| 00039d50:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 00039d60:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | |||
| 00039d70:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | |||
| 00039d80:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | |||
| 00039d90:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | |||
| 00039da0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00039dc0:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | |||
| 00039dd0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | |||
| 00039de0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 00039df0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 00039e00:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 00039e10:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 00039e20:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | |||
| 00039e30:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | |||
| 00039e40:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | |||
| 00039e50:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | |||
| 00039e60:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | |||
| 00039e70:·6f6e·7461·696e·696e·6720·2161·7574·6865··ontaining·!authe | |||
| Max diff block lines reached; 350832/370758 bytes (94.63%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:debian:debian_linux:11 | 40 | ····*·cpe:/o:debian:debian_linux:11 |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 91, 14 lines modified | Offset 91, 35 lines modified | ||
| 91 | ···························1.7,·SR·1.8,·SR·1.9 | 91 | ···························1.7,·SR·1.8,·SR·1.9 |
| 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 97 | ···························SRG-OS-000373-GPOS-00158 | 97 | ···························SRG-OS-000373-GPOS-00158 |
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 103 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 104 | ··if·[·!·-e·"$f"·]·;·then | ||
| 105 | ····continue | ||
| 106 | ··fi | ||
| 107 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 108 | ··if·!·test·-z·"$matching_list";·then | ||
| 109 | ····while·IFS=·read·-r·entry;·do | ||
| 110 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 111 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 112 | ····done·<<<·"$matching_list" | ||
| 113 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 114 | visudo" | ||
| 115 | ··fi | ||
| 116 | done | ||
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 103 | -·name:·Find·/etc/sudoers.d/·files | 122 | -·name:·Find·/etc/sudoers.d/·files |
| 104 | ··ansible.builtin.find: | 123 | ··ansible.builtin.find: |
| Offset 129, 35 lines modified | Offset 150, 14 lines modified | ||
| 129 | ··-·NIST-800-53-IA-11 | 150 | ··-·NIST-800-53-IA-11 |
| 130 | ··-·low_complexity | 151 | ··-·low_complexity |
| 131 | ··-·low_disruption | 152 | ··-·low_disruption |
| 132 | ··-·medium_severity | 153 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 134 | ··-·restrict_strategy | 155 | ··-·restrict_strategy |
| 135 | ··-·sudo_remove_no_authenticate | 156 | ··-·sudo_remove_no_authenticate |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 141 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 142 | ··if·[·!·-e·"$f"·]·;·then | ||
| 143 | ····continue | ||
| 144 | ··fi | ||
| 145 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 146 | ··if·!·test·-z·"$matching_list";·then | ||
| 147 | ····while·IFS=·read·-r·entry;·do | ||
| 148 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 149 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 150 | ····done·<<<·"$matching_list" | ||
| 151 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 152 | visudo" | ||
| 153 | ··fi | ||
| 154 | done | ||
| 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 156 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 158 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 159 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 158 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 160 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 159 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 161 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 160 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 162 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 161 | ············Without·re-authentication,·users·may·access·resources·or·perform | 163 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 178, 14 lines modified | Offset 178, 35 lines modified | ||
| 178 | ···························1.7,·SR·1.8,·SR·1.9 | 178 | ···························1.7,·SR·1.8,·SR·1.9 |
| 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 184 | ···························SRG-OS-000373-GPOS-00158 | 184 | ···························SRG-OS-000373-GPOS-00158 |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 191 | ··if·[·!·-e·"$f"·]·;·then | ||
| 192 | ····continue | ||
| 193 | ··fi | ||
| 194 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 195 | ··if·!·test·-z·"$matching_list";·then | ||
| 196 | ····while·IFS=·read·-r·entry;·do | ||
| 197 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 198 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 199 | ····done·<<<·"$matching_list" | ||
| 200 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 201 | visudo" | ||
| 202 | ··fi | ||
| 203 | done | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 190 | -·name:·Find·/etc/sudoers.d/·files | 209 | -·name:·Find·/etc/sudoers.d/·files |
| 191 | ··ansible.builtin.find: | 210 | ··ansible.builtin.find: |
| Offset 216, 35 lines modified | Offset 237, 14 lines modified | ||
| 216 | ··-·NIST-800-53-IA-11 | 237 | ··-·NIST-800-53-IA-11 |
| 217 | ··-·low_complexity | 238 | ··-·low_complexity |
| 218 | ··-·low_disruption | 239 | ··-·low_disruption |
| Max diff block lines reached; 46457/52173 bytes (89.04%) of diff not shown. | |||
| Offset 14283, 15 lines modified | Offset 14283, 15 lines modified | ||
| 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037d10:·342d·3131·2d30·3 | 00037d10:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 16011, 147 lines modified | Offset 16011, 147 lines modified | ||
| 0003e8a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003e8a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003e8b0:·743d·2223·6964·6d31·3934·3022·2074·6162··t="#idm1940"·tab | 0003e8b0:·743d·2223·6964·6d31·3934·3022·2074·6162··t="#idm1940"·tab | ||
| 0003e8c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003e8c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003e8d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003e8d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003e8e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003e8e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003e8f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003e8f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003e900:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003e900:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003e910:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003e920:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003e930:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003e940:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003e950:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003e960:·6964·6d31·3934·3022·3e3c·7461·626c·6520··idm1940"><table· | |||
| 0003e970:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003e980:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003e990:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003e9a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003e9b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003e9c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003e9d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003e9e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003e9f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ea00:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003ea10:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003ea20:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003ea30:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 0003ea40:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 0003ea50:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ea60:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 0003ea70:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 0003ea80:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 0003ea90:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 0003eaa0:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 0003eab0:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 0003eac0:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 0003ead0:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 0003eae0:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 0003eaf0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 0003eb00:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 0003eb10:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 0003eb20:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 0003eb30:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 0003eb40:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 0003eb50:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 0003eb60:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 0003eb70:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 0003eb80:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 0003eb90:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 0003eba0:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 0003ebb0:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 0003ebc0:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 0003ebd0:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 0003ebe0:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 0003ebf0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 0003ec00:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 0003ec10:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 0003ec20:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 0003ec30:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 0003ec40:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ec50:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ec60:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ec70:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ec80:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ec90:·743d·2223·6964·6d31·3934·3122·2074·6162··t="#idm1941"·tab | |||
| 0003eca0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003ecb0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ecc0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003ecd0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003ece0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003e | 0003ecf0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003e | 0003ed00:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003e | 0003ed10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003e | 0003ed20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003e | 0003ed30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003e | 0003ed40:·643d·2269·646d·3139·3431·223e·3c74·6162··d="idm1941"><tab | ||
| 0003e | 0003ed50:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003e | 0003ed60:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003e | 0003ed70:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003e | 0003ed80:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003e | 0003ed90:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003e9c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e9d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003e9e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003e9f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ea00:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ea10:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003ea20:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003ea30:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003ea40:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003ea50:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ea60:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 0003ea70:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 0003ea80:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 0003ea90:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 0003eaa0:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 0003eab0:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 0003eac0:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 0003ead0:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 0003eae0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003eaf0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 0003eb00:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 0003eb10:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003eb20:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003eb30:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003eb40:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003eb50:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 0003eb60:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 0003eb70:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 0003eb80:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 0003eb90:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 0003eba0:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| Max diff block lines reached; 1077906/1097970 bytes (98.17%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:11 | 41 | ····*·cpe:/o:debian:debian_linux:11 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 229, 14 lines modified | Offset 229, 35 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Find·/etc/sudoers.d/·files | 260 | -·name:·Find·/etc/sudoers.d/·files |
| 242 | ··ansible.builtin.find: | 261 | ··ansible.builtin.find: |
| Offset 267, 35 lines modified | Offset 288, 14 lines modified | ||
| 267 | ··-·NIST-800-53-IA-11 | 288 | ··-·NIST-800-53-IA-11 |
| 268 | ··-·low_complexity | 289 | ··-·low_complexity |
| 269 | ··-·low_disruption | 290 | ··-·low_disruption |
| 270 | ··-·medium_severity | 291 | ··-·medium_severity |
| 271 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 273 | ··-·sudo_remove_no_authenticate | 294 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 14 lines modified | Offset 316, 35 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 328 | -·name:·Find·/etc/sudoers.d/·files | 347 | -·name:·Find·/etc/sudoers.d/·files |
| 329 | ··ansible.builtin.find: | 348 | ··ansible.builtin.find: |
| Offset 354, 35 lines modified | Offset 375, 14 lines modified | ||
| 354 | ··-·NIST-800-53-IA-11 | 375 | ··-·NIST-800-53-IA-11 |
| 355 | ··-·low_complexity | 376 | ··-·low_complexity |
| 356 | ··-·low_disruption | 377 | ··-·low_disruption |
| Max diff block lines reached; 133682/139408 bytes (95.89%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037d30:·3230·3234·2d31·312d·303 | 00037d30:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 16220, 736 lines modified | Offset 16220, 736 lines modified | ||
| 0003f5b0:·7267·6574·3d22·2369·646d·3530·3437·2220··rget="#idm5047"· | 0003f5b0:·7267·6574·3d22·2369·646d·3530·3437·2220··rget="#idm5047"· | ||
| 0003f5c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003f5c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003f5d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003f5d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003f5e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003f5e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003f5f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003f5f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003f600:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003f600:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (722 lines added, 722 lines removed) | |
| 0003f610:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003f610:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003f620:·6e20· | 0003f620:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0003f630:· | 0003f630:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003f640:· | 0003f640:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003f650:·6 | 0003f650:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003f660:· | 0003f660:·643d·2269·646d·3530·3437·223e·3c70·7265··d="idm5047"><pre | ||
| 0003f670:· | 0003f670:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003f680:· | 0003f680:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 0003f690:· | 0003f690:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 0003f6a0:· | 0003f6a0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 0003f6b0:· | 0003f6b0:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | ||
| 0003f6c0:·6 | 0003f6c0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | ||
| 0003f6d0:· | 0003f6d0:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | ||
| 0003f6e0:· | 0003f6e0:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | ||
| 0003f6f0:·6 | 0003f6f0:·6e0a·0a23·204c·6973·7420·6f66·206c·6f67··n..#·List·of·log | ||
| 0003f700:· | 0003f700:·2066·696c·6520·7061·7468·7320·746f·2062···file·paths·to·b | ||
| 0003f710:·6 | 0003f710:·6520·696e·7370·6563·7465·6420·666f·7220··e·inspected·for· | ||
| 0003f720:·6 | 0003f720:·636f·7272·6563·7420·7065·726d·6973·7369··correct·permissi | ||
| 0003f730:· | 0003f730:·6f6e·730a·2320·2a20·5072·696d·6172·696c··ons.#·*·Primaril | ||
| 0003f740:·7 | 0003f740:·7920·696e·7370·6563·7420·6c6f·6720·6669··y·inspect·log·fi | ||
| 0003f750:· | 0003f750:·6c65·2070·6174·6873·206c·6973·7465·6420··le·paths·listed· | ||
| 0003f760:·6 | 0003f760:·696e·202f·6574·632f·7273·7973·6c6f·672e··in·/etc/rsyslog. | ||
| 0003f770:·6 | 0003f770:·636f·6e66·0a52·5359·534c·4f47·5f45·5443··conf.RSYSLOG_ETC | ||
| 0003f780:· | 0003f780:·5f43·4f4e·4649·473d·222f·6574·632f·7273··_CONFIG="/etc/rs | ||
| 0003f790:· | 0003f790:·7973·6c6f·672e·636f·6e66·220a·2320·2a20··yslog.conf".#·*· | ||
| 0003f7a0:· | 0003f7a0:·416e·6420·616c·736f·2074·6865·206c·6f67··And·also·the·log | ||
| 0003f7b0:· | 0003f7b0:·2066·696c·6520·7061·7468·7320·6c69·7374···file·paths·list | ||
| 0003f7c0:·6 | 0003f7c0:·6564·2061·6674·6572·2072·7379·736c·6f67··ed·after·rsyslog | ||
| 0003f7d0:· | 0003f7d0:·2773·2024·496e·636c·7564·6543·6f6e·6669··'s·$IncludeConfi | ||
| 0003f7e0:·6 | 0003f7e0:·6720·6469·7265·6374·6976·650a·2320·2020··g·directive.#··· | ||
| 0003f7f0:·2 | 0003f7f0:·2873·746f·7265·2074·6865·2072·6573·756c··(store·the·resul | ||
| 0003f800:· | 0003f800:·7420·696e·746f·2061·7272·6179·2066·6f72··t·into·array·for | ||
| 0003f810:· | 0003f810:·2074·6865·2063·6173·6520·7468·6572·6527···the·case·there' | ||
| 0003f820:· | 0003f820:·7320·7368·656c·6c20·676c·6f62·2075·7365··s·shell·glob·use | ||
| 0003f830:·6 | 0003f830:·6420·6173·2076·616c·7565·206f·6620·496e··d·as·value·of·In | ||
| 0003f840:· | 0003f840:·636c·7564·6543·6f6e·6669·6729·0a72·6561··cludeConfig).rea | ||
| 0003f850:·6 | 0003f850:·6461·7272·6179·202d·7420·4f4c·445f·494e··darray·-t·OLD_IN | ||
| 0003f860:· | 0003f860:·4320·266c·743b·2026·6c74·3b28·6772·6570··C·<·<(grep | ||
| 0003f870:· | 0003f870:·202d·6520·225c·2449·6e63·6c75·6465·436f···-e·"\$IncludeCo | ||
| 0003f880:· | 0003f880:·6e66·6967·5b5b·3a73·7061·6365·3a5d·5d5c··nfig[[:space:]]\ | ||
| 0003f890:· | 0003f890:·2b5b·5e5b·3a73·7061·6365·3a5d·3b5d·5c2b··+[^[:space:];]\+ | ||
| 0003f8a0:· | 0003f8a0:·2220·2f65·7463·2f72·7379·736c·6f67·2e63··"·/etc/rsyslog.c | ||
| 0003f8b0:· | 0003f8b0:·6f6e·6620·7c20·6375·7420·2d64·2027·2027··onf·|·cut·-d·'·' | ||
| 0003f8c0:· | 0003f8c0:·202d·6620·3229·0a72·6561·6461·7272·6179···-f·2).readarray | ||
| 0003f8d0:· | 0003f8d0:·202d·7420·5253·5953·4c4f·475f·494e·434c···-t·RSYSLOG_INCL | ||
| 0003f8e0:· | 0003f8e0:·5544·455f·434f·4e46·4947·2026·6c74·3b20··UDE_CONFIG·<· | ||
| 0003f8f0:· | 0003f8f0:·266c·743b·2866·6f72·2049·4e43·5041·5448··<(for·INCPATH | ||
| 0003f900:· | 0003f900:·2069·6e20·2224·7b4f·4c44·5f49·4e43·5b40···in·"${OLD_INC[@ | ||
| 0003f910:·5 | 0003f910:·5d7d·223b·2064·6f20·6576·616c·2070·7269··]}";·do·eval·pri | ||
| 0003f920:·6 | 0003f920:·6e74·6620·2725·735c·5c6e·2720·2224·7b49··ntf·'%s\\n'·"${I | ||
| 0003f930:· | 0003f930:·4e43·5041·5448·7d22·3b20·646f·6e65·290a··NCPATH}";·done). | ||
| 0003f940:·65 | 0003f940:·7265·6164·6172·7261·7920·2d74·204e·4557··readarray·-t·NEW | ||
| 0003f950:· | 0003f950:·5f49·4e43·2026·6c74·3b20·266c·743b·2873··_INC·<·<(s | ||
| 0003f960:· | 0003f960:·6564·202d·6e20·272f·5e5c·732a·696e·636c··ed·-n·'/^\s*incl | ||
| 0003f970:·75 | 0003f970:·7564·6528·2f2c·2f29·2f49·7027·202f·6574··ude(/,/)/Ip'·/et | ||
| 0003f980:·6 | 0003f980:·632f·7273·7973·6c6f·672e·636f·6e66·207c··c/rsyslog.conf·| | ||
| 0003f990:· | 0003f990:·2073·6564·202d·6e20·2773·402e·2a66·696c···sed·-n·'s@.*fil | ||
| 0003f9a0:· | 0003f9a0:·655c·732a·3d5c·732a·225c·285b·2f5b·3a61··e\s*=\s*"\([/[:a | ||
| 0003f9b0:· | 0003f9b0:·6c6e·756d·3a5d·5b3a·7075·6e63·743a·5d5d··lnum:][:punct:]] | ||
| 0003f9c0:· | 0003f9c0:·2a5c·2922·2e2a·405c·3140·4970·2729·0a72··*\)".*@\1@Ip').r | ||
| 0003f9d0:· | 0003f9d0:·6561·6461·7272·6179·202d·7420·5253·5953··eadarray·-t·RSYS | ||
| 0003f9e0:· | 0003f9e0:·4c4f·475f·494e·434c·5544·4520·266c·743b··LOG_INCLUDE·< | ||
| 0003f9f0:·202 | 0003f9f0:·2026·6c74·3b28·666f·7220·494e·4350·4154···<(for·INCPAT | ||
| 0003fa00:· | 0003fa00:·4820·696e·2022·247b·4e45·575f·494e·435b··H·in·"${NEW_INC[ | ||
| 0003fa10:· | 0003fa10:·405d·7d22·3b20·646f·2065·7661·6c20·7072··@]}";·do·eval·pr | ||
| 0003fa20:· | 0003fa20:·696e·7466·2027·2573·5c5c·6e27·2022·247b··intf·'%s\\n'·"${ | ||
| 0003fa30:· | 0003fa30:·494e·4350·4154·487d·223b·2064·6f6e·6529··INCPATH}";·done) | ||
| 0003fa40:· | 0003fa40:·0a0a·2320·4465·636c·6172·6520·616e·2061··..#·Declare·an·a | ||
| 0003fa50:· | 0003fa50:·7272·6179·2074·6f20·686f·6c64·2074·6865··rray·to·hold·the | ||
| 0003fa60:· | 0003fa60:·2066·696e·616c·206c·6973·7420·6f66·2064···final·list·of·d | ||
| 0003fa70:· | 0003fa70:·6966·6665·7265·6e74·206c·6f67·2066·696c··ifferent·log·fil | ||
| 0003fa80:· | 0003fa80:·6520·7061·7468·730a·6465·636c·6172·6520··e·paths.declare· | ||
| 0003fa90:· | 0003fa90:·2d61·204c·4f47·5f46·494c·455f·5041·5448··-a·LOG_FILE_PATH | ||
| 0003faa0:· | 0003faa0:·530a·0a23·2041·7272·6179·2074·6f20·686f··S..#·Array·to·ho | ||
| 0003fab0:·6 | 0003fab0:·6c64·2061·6c6c·2072·7379·736c·6f67·2063··ld·all·rsyslog·c | ||
| 0003fac0:· | 0003fac0:·6f6e·6669·6720·656e·7472·6965·730a·5253··onfig·entries.RS | ||
| 0003fad0:· | 0003fad0:·5953·4c4f·475f·434f·4e46·4947·533d·2829··YSLOG_CONFIGS=() | ||
| 0003fae0:· | 0003fae0:·0a52·5359·534c·4f47·5f43·4f4e·4649·4753··.RSYSLOG_CONFIGS | ||
| 0003faf0:· | 0003faf0:·3d28·2224·7b52·5359·534c·4f47·5f45·5443··=("${RSYSLOG_ETC | ||
| 0003fb00:· | 0003fb00:·5f43·4f4e·4649·477d·2220·2224·7b52·5359··_CONFIG}"·"${RSY | ||
| 0003fb10:·53 | 0003fb10:·534c·4f47·5f49·4e43·4c55·4445·5f43·4f4e··SLOG_INCLUDE_CON | ||
| 0003fb20:· | 0003fb20:·4649·475b·405d·7d22·2022·247b·5253·5953··FIG[@]}"·"${RSYS | ||
| 0003fb30:· | 0003fb30:·4c4f·475f·494e·434c·5544·455b·405d·7d22··LOG_INCLUDE[@]}" | ||
| 0003fb40:· | 0003fb40:·290a·0a23·2047·6574·2066·756c·6c20·6c69··)..#·Get·full·li | ||
| 0003fb50:· | 0003fb50:·7374·206f·6620·6669·6c65·7320·746f·2062··st·of·files·to·b | ||
| 0003fb60:· | 0003fb60:·6520·6368·6563·6b65·640a·2320·5253·5953··e·checked.#·RSYS | ||
| 0003fb70:· | 0003fb70:·4c4f·475f·434f·4e46·4947·5320·6d61·7920··LOG_CONFIGS·may· | ||
| 0003fb80:· | 0003fb80:·636f·6e74·6169·6e20·676c·6f62·7320·7375··contain·globs·su | ||
| 0003fb90:·6 | 0003fb90:·6368·2061·730a·2320·2f65·7463·2f72·7379··ch·as.#·/etc/rsy | ||
| 0003fba0:· | 0003fba0:·736c·6f67·2e64·2f2a·2e63·6f6e·6620·2f65··slog.d/*.conf·/e | ||
| 0003fbb0:· | 0003fbb0:·7463·2f72·7379·736c·6f67·2e64·2f2a·2e66··tc/rsyslog.d/*.f | ||
| 0003fbc0:·6c65· | 0003fbc0:·7275·6c65·0a23·2053·6f2c·206c·6f6f·7020··rule.#·So,·loop· | ||
| 0003fbd0:·6 | 0003fbd0:·6f76·6572·2074·6865·2065·6e74·7269·6573··over·the·entries | ||
| 0003fbe0:· | 0003fbe0:·2069·6e20·5253·5953·4c4f·475f·434f·4e46···in·RSYSLOG_CONF | ||
| 0003fbf0:· | 0003fbf0:·4947·5320·616e·6420·7573·6520·6669·6e64··IGS·and·use·find | ||
| 0003fc00:· | 0003fc00:·2074·6f20·6765·7420·7468·6520·6c69·7374···to·get·the·list | ||
| 0003fc10:· | 0003fc10:·206f·6620·696e·636c·7564·6564·2066·696c···of·included·fil | ||
| 0003fc20:·6 | 0003fc20:·6573·2e0a·5253·5953·4c4f·475f·434f·4e46··es..RSYSLOG_CONF | ||
| 0003fc30:· | 0003fc30:·4947·5f46·494c·4553·3d28·290a·666f·7220··IG_FILES=().for· | ||
| 0003fc40:· | 0003fc40:·454e·5452·5920·696e·2022·247b·5253·5953··ENTRY·in·"${RSYS | ||
| 0003fc50:· | 0003fc50:·4c4f·475f·434f·4e46·4947·535b·405d·7d22··LOG_CONFIGS[@]}" | ||
| 0003fc60:· | 0003fc60:·0a64·6f0a·0923·2049·6620·6469·7265·6374··.do..#·If·direct | ||
| 0003fc70:·6 | 0003fc70:·6f72·792c·2072·7379·736c·6f67·2077·696c··ory,·rsyslog·wil | ||
| 0003fc80:· | 0003fc80:·6c20·7365·6172·6368·2066·6f72·2063·6f6e··l·search·for·con | ||
| Max diff block lines reached; 935958/1037304 bytes (90.23%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·11 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·11 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:11 | 42 | ····*·cpe:/o:debian:debian_linux:11 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 258, 14 lines modified | Offset 258, 139 lines modified | ||
| 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 |
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 266 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 267 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 268 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 269 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 270 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 271 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 272 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 273 | of·IncludeConfig) | ||
| 274 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 275 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 276 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 277 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 278 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 279 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 280 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 281 | '%s\\n'·"${INCPATH}";·done) | ||
| 282 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 283 | declare·-a·LOG_FILE_PATHS | ||
| 284 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 285 | RSYSLOG_CONFIGS=() | ||
| 286 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 287 | {RSYSLOG_INCLUDE[@]}") | ||
| 288 | #·Get·full·list·of·files·to·be·checked | ||
| 289 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 290 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 291 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 292 | included·files. | ||
| 293 | RSYSLOG_CONFIG_FILES=() | ||
| 294 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 295 | do | ||
| 296 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 297 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 298 | » if·[·-d·"${ENTRY}"·] | ||
| 299 | » then | ||
| 300 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 301 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 302 | » elif·[·-f·"${ENTRY}"·] | ||
| 303 | » then | ||
| 304 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 305 | » else | ||
| 306 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 307 | » fi | ||
| 308 | done | ||
| 309 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 310 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 311 | configuration) | ||
| 312 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 313 | do | ||
| 314 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 315 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 316 | ('$')·characters, | ||
| 317 | » #·*·Ignore·empty·lines, | ||
| 318 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 319 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 320 | not·log·files | ||
| 321 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 322 | path | ||
| 323 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 324 | all·of·the | ||
| 325 | » #·following·are·met: | ||
| 326 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 327 | » #·*·it·is·preceded·by·space | ||
| 328 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 329 | characters | ||
| 330 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 331 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 332 | » then | ||
| 333 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 334 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 335 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 336 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 337 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 338 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 339 | {FILTERED_PATHS}") | ||
| 340 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 341 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 342 | newline),·split | ||
| 343 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 344 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 345 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 346 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 347 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 348 | » » #·Delete·the·temporary·array | ||
| 349 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 350 | » fi | ||
| 351 | done | ||
| 352 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 353 | grep·regex·is·a·bit | ||
| 354 | #·curly: | ||
| 355 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 356 | #·extract·File="logfile"·expression | ||
| 357 | #·match·only·"logfile"·expression | ||
| 358 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 359 | do | ||
| 360 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 361 | "${LOG_FILE}") | ||
| 362 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| Max diff block lines reached; 123475/130045 bytes (94.95%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037de0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037df0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037df0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037e00:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037e00:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e10:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e10:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e20:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e20:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e30:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e30:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e40:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e40:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e50:·3032·342d·3131·2d30·3 | 00037e50:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 00037e60:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e60:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e70:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e70:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e80:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e80:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e90:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e90:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037ea0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037ea0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037eb0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037eb0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ec0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ec0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15038, 167 lines modified | Offset 15038, 167 lines modified | ||
| 0003abd0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003abd0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003abe0:·646d·3236·3632·2220·7461·6269·6e64·6578··dm2662"·tabindex | 0003abe0:·646d·3236·3632·2220·7461·6269·6e64·6578··dm2662"·tabindex | ||
| 0003abf0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003abf0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003ac00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003ac00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003ac10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003ac10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003ac20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003ac20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003ac30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003ac30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003ac40:·6d65·6469·6174·696f·6e20· | 0003ac40:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | ||
| 0003ac50:· | 0003ac50:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003ac60:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ac70:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ac80:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ac90:·3236·3632·223e·3c74·6162·6c65·2063·6c61··2662"><table·cla | |||
| 0003aca0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003ac60:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ac70:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ac80:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ac90:·6d32·3636·3222·3e3c·7461·626c·6520·636c··m2662"><table·cl | |||
| 0003aca0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003acb0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ac | 0003acb0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003acc0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003acd0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003ace0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003acd0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ace0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003acf0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ad00:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ad10:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ad20:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ad30:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ad40:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003ad50:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003ad60:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003ad70:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003ad80:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003ad90:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003ada0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003adb0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003adc0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003add0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003ade0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003adf0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003ae00:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003ae10:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003ae20:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003ae30:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003ae40:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003ae50:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003ae60:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003ae70:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003ae80:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003ae90:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003aea0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003aeb0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003aec0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003aed0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003aee0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003aef0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003af00:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003af10:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003af20:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003af30:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003af40:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003af50:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003af60:·6172·6765·743d·2223·6964·6d32·3636·3322··arget="#idm2663" | |||
| 0003af70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003af80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003af90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003afa0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003afb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003afc0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003afd0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003afe0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003aff0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b000:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b010:·2220·6964·3d22·6964·6d32·3636·3322·3e3c··"·id="idm2663">< | |||
| 0003b020:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b030:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b040:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b050:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b060:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b070:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b080:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b090:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003 | 0003acf0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b0b0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003 | 0003ad00:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003ad10:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003 | 0003ad20:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003 | 0003ad30:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003ad40:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003ad50:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003ad60:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003ad70:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003ad80:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003ad90:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003ada0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003adb0:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003adc0:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003add0:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003ade0:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003adf0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ae00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ae10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ae20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ae30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ae40:·743d·2223·6964·6d32·3636·3322·2074·6162··t="#idm2663"·tab | |||
| 0003ae50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003ae60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ae70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| Max diff block lines reached; 17516286/17539110 bytes (99.87%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 113, 65 lines modified | Offset 113, 65 lines modified | ||
| 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | -·name:·Ensure·aide·is·installed | ||
| 126 | ··package: | ||
| 127 | ····name:·aide | ||
| 128 | ····state:·present | ||
| 129 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 130 | ··tags: | ||
| 131 | ··-·CJIS-5.10.1.3 | ||
| 132 | ··-·NIST-800-53-CM-6(a) | ||
| 133 | ··-·PCI-DSS-Req-11.5 | ||
| 134 | ··-·PCI-DSSv4-11.5.2 | ||
| 135 | ··-·enable_strategy | ||
| 136 | ··-·low_complexity | ||
| 137 | ··-·low_disruption | ||
| 138 | ··-·medium_severity | ||
| 139 | ··-·no_reboot_needed | ||
| 140 | ··-·package_aide_installed | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 146 | include·install_aide | 125 | include·install_aide |
| 147 | class·install_aide·{ | 126 | class·install_aide·{ |
| 148 | ··package·{·'aide': | 127 | ··package·{·'aide': |
| 149 | ····ensure·=>·'installed', | 128 | ····ensure·=>·'installed', |
| 150 | ··} | 129 | ··} |
| 151 | } | 130 | } |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 136 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 163 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 138 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 164 | else | 139 | else |
| 165 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 166 | fi | 141 | fi |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | -·name:·Ensure·aide·is·installed | ||
| 152 | ··package: | ||
| 153 | ····name:·aide | ||
| 154 | ····state:·present | ||
| 155 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 156 | ··tags: | ||
| 157 | ··-·CJIS-5.10.1.3 | ||
| 158 | ··-·NIST-800-53-CM-6(a) | ||
| 159 | ··-·PCI-DSS-Req-11.5 | ||
| 160 | ··-·PCI-DSSv4-11.5.2 | ||
| 161 | ··-·enable_strategy | ||
| 162 | ··-·low_complexity | ||
| 163 | ··-·low_disruption | ||
| 164 | ··-·medium_severity | ||
| 165 | ··-·no_reboot_needed | ||
| 166 | ··-·package_aide_installed | ||
| 167 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 167 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 168 | Run·the·following·command·to·generate·a·new·database: | 168 | Run·the·following·command·to·generate·a·new·database: |
| 169 | $·sudo·aideinit | 169 | $·sudo·aideinit |
| 170 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 170 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 171 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 171 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 172 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 172 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 173 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 173 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 194, 14 lines modified | Offset 194, 40 lines modified | ||
| 194 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 194 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 195 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 195 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 196 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 196 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 197 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 197 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 198 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 198 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 199 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 199 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 200 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 200 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 202 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 203 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 204 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 205 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 206 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 207 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 208 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 209 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| Max diff block lines reached; 1605618/1611774 bytes (99.62%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037dd0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037de0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037de0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037df0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037df0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037e00:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037e00:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037e10:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037e10:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037e20:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037e20:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037e30:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037e30:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037e40:·342d·3131·2d30·3 | 00037e40:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 00037e50:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037e50:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037e60:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037e60:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037e70:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037e70:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037e80:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037e80:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037e90:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037e90:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037ea0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037ea0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037eb0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037eb0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15043, 167 lines modified | Offset 15043, 167 lines modified | ||
| 0003ac20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ac20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ac30:·6964·6d32·3636·3222·2074·6162·696e·6465··idm2662"·tabinde | 0003ac30:·6964·6d32·3636·3222·2074·6162·696e·6465··idm2662"·tabinde | ||
| 0003ac40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ac40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ac50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ac50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ac60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ac60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003ac70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003ac70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ac80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ac80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ac90:·656d·6564·6961·7469·6f6e·20 | 0003ac90:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003aca0:· | 0003aca0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003acb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003acc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003acd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ace0:·6d32·3636·3222·3e3c·7461·626c·6520·636c··m2662"><table·cl | |||
| 0003acf0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ad00:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ad10:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ad20:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ad30:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003ad40:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ad50:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ad60:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ad70:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ad80:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ad90:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003ada0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003adb0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003adc0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003add0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003ade0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003adf0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003ae00:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003ae10:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003ae20:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003ae30:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003ae40:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003ae50:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003ae60:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003ae70:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003ae80:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003ae90:·6574·3d22·2369·646d·3236·3633·2220·7461··et="#idm2663"·ta | |||
| 0003aea0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003aeb0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003aec0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003aed0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003aee0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003aef0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003af00:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003a | 0003af10:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003a | 0003af20:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003a | 0003af30:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003a | 0003af40:·2269·646d·3236·3633·223e·3c74·6162·6c65··"idm2663"><table | ||
| 0003a | 0003af50:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003a | 0003af60:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003a | 0003af70:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003a | 0003af80:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003a | 0003af90:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003a | 0003afa0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003a | 0003afb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003a | 0003afc0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003a | 0003afd0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003a | 0003afe0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003a | 0003aff0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003 | 0003b000:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003 | 0003b010:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003 | 0003b020:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003 | 0003b030:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b040:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003b050:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003b060:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003b070:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 0003b080:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003b090:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003b0a0:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003b0b0:·7265·6e76·205d·3b20·7468·656e·0a0a·4445··renv·];·then..DE | |||
| 0003b0c0:·4249·414e·5f46·524f·4e54·454e·443d·6e6f··BIAN_FRONTEND=no | |||
| 0003b0d0:·6e69·6e74·6572·6163·7469·7665·2061·7074··ninteractive·apt | |||
| 0003b0e0:·2d67·6574·2069·6e73·7461·6c6c·202d·7920··-get·install·-y· | |||
| 0003b0f0:·2261·6964·6522·0a0a·656c·7365·0a20·2020··"aide"..else.··· | |||
| 0003b100:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003b110:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003b120:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003b130:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003ade0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003adf0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003ae00:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003ae10:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003ae20:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003ae30:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003ae40:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003ae50:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003ae60:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003ae70:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003ae80:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003ae90:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003aea0:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003aeb0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003aec0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003aed0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003aee0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003aef0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003af00:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003af10:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003af20:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003af30:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003af40:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003af50:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003 | 0003b140:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | ||
| 0003 | 0003b150:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003 | 0003b160:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003 | 0003b170:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003 | 0003b180:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| Max diff block lines reached; 17702785/17725609 bytes (99.87%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 114, 65 lines modified | Offset 114, 65 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | -·name:·Ensure·aide·is·installed | ||
| 127 | ··package: | ||
| 128 | ····name:·aide | ||
| 129 | ····state:·present | ||
| 130 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 131 | ··tags: | ||
| 132 | ··-·CJIS-5.10.1.3 | ||
| 133 | ··-·NIST-800-53-CM-6(a) | ||
| 134 | ··-·PCI-DSS-Req-11.5 | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | ||
| 136 | ··-·enable_strategy | ||
| 137 | ··-·low_complexity | ||
| 138 | ··-·low_disruption | ||
| 139 | ··-·medium_severity | ||
| 140 | ··-·no_reboot_needed | ||
| 141 | ··-·package_aide_installed | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | include·install_aide | 126 | include·install_aide |
| 148 | class·install_aide·{ | 127 | class·install_aide·{ |
| 149 | ··package·{·'aide': | 128 | ··package·{·'aide': |
| 150 | ····ensure·=>·'installed', | 129 | ····ensure·=>·'installed', |
| 151 | ··} | 130 | ··} |
| 152 | } | 131 | } |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 137 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 164 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 139 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 165 | else | 140 | else |
| 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 141 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 167 | fi | 142 | fi |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | [[packages]] | ||
| 145 | name·=·"aide" | ||
| 146 | version·=·"*" | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | -·name:·Ensure·aide·is·installed | ||
| 153 | ··package: | ||
| 154 | ····name:·aide | ||
| 155 | ····state:·present | ||
| 156 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 157 | ··tags: | ||
| 158 | ··-·CJIS-5.10.1.3 | ||
| 159 | ··-·NIST-800-53-CM-6(a) | ||
| 160 | ··-·PCI-DSS-Req-11.5 | ||
| 161 | ··-·PCI-DSSv4-11.5.2 | ||
| 162 | ··-·enable_strategy | ||
| 163 | ··-·low_complexity | ||
| 164 | ··-·low_disruption | ||
| 165 | ··-·medium_severity | ||
| 166 | ··-·no_reboot_needed | ||
| 167 | ··-·package_aide_installed | ||
| 168 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 168 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 169 | Run·the·following·command·to·generate·a·new·database: | 169 | Run·the·following·command·to·generate·a·new·database: |
| 170 | $·sudo·aideinit | 170 | $·sudo·aideinit |
| 171 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 171 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 172 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 172 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 173 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 173 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 174 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 174 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 195, 14 lines modified | Offset 195, 40 lines modified | ||
| 195 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 195 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 196 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 196 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 197 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 197 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 198 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 198 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 200 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 200 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 201 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 201 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 203 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 204 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 205 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 206 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 207 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 208 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 209 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 210 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| Max diff block lines reached; 1638649/1644809 bytes (99.63%) of diff not shown. | |||
| Offset 14304, 15 lines modified | Offset 14304, 15 lines modified | ||
| 00037df0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037df0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037e00:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037e00:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037e10:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037e10:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037e20:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037e20:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037e30:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037e30:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037e40:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037e40:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037e50:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037e50:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037e60:·342d·3131·2d30·3 | 00037e60:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 00037e70:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037e70:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037e80:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037e80:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037e90:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037e90:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037ea0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037ea0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037eb0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037eb0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037ec0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037ec0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037ed0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037ed0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15029, 167 lines modified | Offset 15029, 167 lines modified | ||
| 0003ab40:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003ab40:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003ab50:·6d32·3636·3222·2074·6162·696e·6465·783d··m2662"·tabindex= | 0003ab50:·6d32·3636·3222·2074·6162·696e·6465·783d··m2662"·tabindex= | ||
| 0003ab60:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003ab60:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003ab70:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003ab70:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003ab80:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003ab80:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003ab90:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003ab90:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003aba0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003aba0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003abb0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003abc0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003abd0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003abe0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003abf0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003ac00:·3636·3222·3e3c·7461·626c·6520·636c·6173··662"><table·clas | |||
| 0003ac10:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003abb0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003abc0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003abd0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003abe0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003abf0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ac00:·3236·3632·223e·3c74·6162·6c65·2063·6c61··2662"><table·cla | |||
| 0003ac10:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003ac20:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003ac | 0003ac20:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003ac30:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003ac40:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ac50:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ac60:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ac70:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003ac40:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003ac50:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003ac60:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ac70:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003ac80:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003ac90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003aca0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003acb0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003acc0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003acd0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003ace0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003acf0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003ad00:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003ad10:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003ad20:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003ad30:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003ad40:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003ad50:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003ad60:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003ad70:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003ad80:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003ad90:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003ada0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003adb0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003adc0:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003add0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003ade0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003adf0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003ae00:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003ae10:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003ae20:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003ae30:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003ae40:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003ae50:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003ae60:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003ae70:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003ae80:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003ae90:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003aea0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003aeb0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003aec0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003aed0:·7267·6574·3d22·2369·646d·3236·3633·2220··rget="#idm2663"· | |||
| 0003aee0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003aef0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003af00:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003af10:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003af20:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003af30:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003af40:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003af50:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003af60:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003af70:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af80:·2069·643d·2269·646d·3236·3633·223e·3c74···id="idm2663"><t | |||
| 0003af90:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003afa0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003afb0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003afc0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003afd0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003a | 0003ac80:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003a | 0003ac90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b000:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b010:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003 | 0003aca0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003acb0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003acc0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003 | 0003acd0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003b040:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003 | 0003ace0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003acf0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003ad00:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003ad10:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003ad20:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003ad30:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003ad40:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003ad50:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003ad60:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ad70:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ad80:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ad90:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ada0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003adb0:·3d22·2369·646d·3236·3633·2220·7461·6269··="#idm2663"·tabi | |||
| 0003adc0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003add0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| Max diff block lines reached; 6909090/6931914 bytes (99.67%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 65 lines modified | Offset 111, 65 lines modified | ||
| 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | -·name:·Ensure·aide·is·installed | ||
| 124 | ··package: | ||
| 125 | ····name:·aide | ||
| 126 | ····state:·present | ||
| 127 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 128 | ··tags: | ||
| 129 | ··-·CJIS-5.10.1.3 | ||
| 130 | ··-·NIST-800-53-CM-6(a) | ||
| 131 | ··-·PCI-DSS-Req-11.5 | ||
| 132 | ··-·PCI-DSSv4-11.5.2 | ||
| 133 | ··-·enable_strategy | ||
| 134 | ··-·low_complexity | ||
| 135 | ··-·low_disruption | ||
| 136 | ··-·medium_severity | ||
| 137 | ··-·no_reboot_needed | ||
| 138 | ··-·package_aide_installed | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | include·install_aide | 123 | include·install_aide |
| 145 | class·install_aide·{ | 124 | class·install_aide·{ |
| 146 | ··package·{·'aide': | 125 | ··package·{·'aide': |
| 147 | ····ensure·=>·'installed', | 126 | ····ensure·=>·'installed', |
| 148 | ··} | 127 | ··} |
| 149 | } | 128 | } |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | #·Remediation·is·applicable·only·in·certain·platforms | 134 | #·Remediation·is·applicable·only·in·certain·platforms |
| 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 161 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 136 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 162 | else | 137 | else |
| 163 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 164 | fi | 139 | fi |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"aide" | ||
| 143 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | -·name:·Ensure·aide·is·installed | ||
| 150 | ··package: | ||
| 151 | ····name:·aide | ||
| 152 | ····state:·present | ||
| 153 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 154 | ··tags: | ||
| 155 | ··-·CJIS-5.10.1.3 | ||
| 156 | ··-·NIST-800-53-CM-6(a) | ||
| 157 | ··-·PCI-DSS-Req-11.5 | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | ||
| 159 | ··-·enable_strategy | ||
| 160 | ··-·low_complexity | ||
| 161 | ··-·low_disruption | ||
| 162 | ··-·medium_severity | ||
| 163 | ··-·no_reboot_needed | ||
| 164 | ··-·package_aide_installed | ||
| 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 166 | Run·the·following·command·to·generate·a·new·database: | 166 | Run·the·following·command·to·generate·a·new·database: |
| 167 | $·sudo·aideinit | 167 | $·sudo·aideinit |
| 168 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 168 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 169 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 169 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 170 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 170 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 171 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 171 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 192, 14 lines modified | Offset 192, 40 lines modified | ||
| 192 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 192 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 193 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 193 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 194 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 194 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 195 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 195 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 196 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 196 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 197 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 197 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 198 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 198 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 200 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 201 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 202 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 203 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 204 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 205 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 206 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 207 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| Max diff block lines reached; 882075/888350 bytes (99.29%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | 00037e40:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037e50:·2d30·3 | 00037e50:·2d30·3729·0a20·2020·2020·2020·2020·2020··-07).··········· | ||
| 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15543, 412 lines modified | Offset 15543, 412 lines modified | ||
| 0003cb60:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003cb60:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003cb70:·6d34·3631·3922·2074·6162·696e·6465·783d··m4619"·tabindex= | 0003cb70:·6d34·3631·3922·2074·6162·696e·6465·783d··m4619"·tabindex= | ||
| 0003cb80:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003cb80:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003cb90:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003cb90:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003cba0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003cba0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003cbb0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003cbb0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (398 lines added, 398 lines removed) | |
| 0003cbc0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003cbc0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003cbd0:·6564·6961·7469·6f6e·20 | 0003cbd0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003cbe0:· | 0003cbe0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003cbf0:·3 | 0003cbf0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003cc00:· | 0003cc00:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003cc10:·6 | 0003cc10:·6170·7365·2220·6964·3d22·6964·6d34·3631··apse"·id="idm461 | ||
| 0003cc20:·3 | 0003cc20:·3922·3e3c·7072·653e·3c63·6f64·653e·2320··9"><pre><code>#· | ||
| 0003cc30:· | 0003cc30:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003cc40:·7 | 0003cc40:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0003cc50:· | 0003cc50:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 0003cc60:· | 0003cc60:·726d·730a·6966·2064·706b·672d·7175·6572··rms.if·dpkg-quer | ||
| 0003cc70:· | 0003cc70:·7920·2d2d·7368·6f77·202d·2d73·686f·7766··y·--show·--showf | ||
| 0003cc80:· | 0003cc80:·6f72·6d61·743d·2724·7b64·623a·5374·6174··ormat='${db:Stat | ||
| 0003cc90:· | 0003cc90:·7573·2d53·7461·7475·737d·5c6e·2720·276c··us-Status}\n'·'l | ||
| 0003cca0:·696 | 0003cca0:·6962·7061·6d2d·7275·6e74·696d·6527·2032··ibpam-runtime'·2 | ||
| 0003ccb0:·6 | 0003ccb0:·2667·743b·2f64·6576·2f6e·756c·6c20·7c20··>/dev/null·|· | ||
| 0003ccc0:· | 0003ccc0:·6772·6570·202d·7120·696e·7374·616c·6c65··grep·-q·installe | ||
| 0003ccd0:· | 0003ccd0:·643b·2074·6865·6e0a·0a76·6172·5f70·6173··d;·then..var_pas | ||
| 0003cce0:· | 0003cce0:·7377·6f72·645f·7061·6d5f·756e·6978·5f72··sword_pam_unix_r | ||
| 0003ccf0:· | 0003ccf0:·656d·656d·6265·723d·273c·6162·6272·2074··emember='<abbr·t | ||
| 0003cd00:·6 | 0003cd00:·6974·6c65·3d22·6672·6f6d·2050·726f·6669··itle="from·Profi | ||
| 0003cd10:· | 0003cd10:·6c65·2f72·6566·696e·652d·7661·6c75·653a··le/refine-value: | ||
| 0003cd20:· | 0003cd20:·2078·6363·6466·5f6f·7267·2e73·7367·7072···xccdf_org.ssgpr | ||
| 0003cd30:·6 | 0003cd30:·6f6a·6563·742e·636f·6e74·656e·745f·7661··oject.content_va | ||
| 0003cd40:·6 | 0003cd40:·6c75·655f·7661·725f·7061·7373·776f·7264··lue_var_password | ||
| 0003cd50:· | 0003cd50:·5f70·616d·5f75·6e69·785f·7265·6d65·6d62··_pam_unix_rememb | ||
| 0003cd60:· | 0003cd60:·6572·223e·323c·2f61·6262·723e·270a·0a0a··er">2</abbr>'... | ||
| 0003cd70:· | 0003cd70:·0a0a·0a0a·6966·205b·202d·6520·222f·6574··....if·[·-e·"/et | ||
| 0003cd80:· | 0003cd80:·632f·7061·6d2e·642f·636f·6d6d·6f6e·2d70··c/pam.d/common-p | ||
| 0003cd90:· | 0003cd90:·6173·7377·6f72·6422·205d·203b·2074·6865··assword"·]·;·the | ||
| 0003cda0:· | 0003cda0:·6e0a·2020·2020·7661·6c75·6552·6567·6578··n.····valueRegex | ||
| 0003cdb0:· | 0003cdb0:·3d22·2476·6172·5f70·6173·7377·6f72·645f··="$var_password_ | ||
| 0003cdc0:· | 0003cdc0:·7061·6d5f·756e·6978·5f72·656d·656d·6265··pam_unix_remembe | ||
| 0003cdd0:· | 0003cdd0:·7222·2064·6566·6175·6c74·5661·6c75·653d··r"·defaultValue= | ||
| 0003cde0:·2 | 0003cde0:·2224·7661·725f·7061·7373·776f·7264·5f70··"$var_password_p | ||
| 0003cdf0:· | 0003cdf0:·616d·5f75·6e69·785f·7265·6d65·6d62·6572··am_unix_remember | ||
| 0003ce00:· | 0003ce00:·220a·2020·2020·2320·6e6f·6e2d·656d·7074··".····#·non-empt | ||
| 0003ce10:· | 0003ce10:·7920·7661·6c75·6573·206e·6565·6420·746f··y·values·need·to | ||
| 0003ce20:·20 | 0003ce20:·2062·6520·7072·6563·6564·6564·2062·7920···be·preceded·by· | ||
| 0003ce30:·61 | 0003ce30:·616e·2065·7175·616c·7320·7369·676e·0a20··an·equals·sign.· | ||
| 0003ce40:· | 0003ce40:·2020·205b·202d·6e20·2224·7b76·616c·7565·····[·-n·"${value | ||
| 0003ce50:· | 0003ce50:·5265·6765·787d·2220·5d20·2661·6d70·3b26··Regex}"·]·&& | ||
| 0003ce60:· | 0003ce60:·616d·703b·2076·616c·7565·5265·6765·783d··amp;·valueRegex= | ||
| 0003ce70:· | 0003ce70:·223d·247b·7661·6c75·6552·6567·6578·7d22··"=${valueRegex}" | ||
| 0003ce80:· | 0003ce80:·0a20·2020·2023·2061·6464·2061·6e20·6571··.····#·add·an·eq | ||
| 0003ce90:· | 0003ce90:·7561·6c73·2073·6967·6e20·746f·206e·6f6e··uals·sign·to·non | ||
| 0003cea0:· | 0003cea0:·2d65·6d70·7479·2076·616c·7565·730a·2020··-empty·values.·· | ||
| 0003ceb0:· | 0003ceb0:·2020·5b20·2d6e·2022·247b·6465·6661·756c····[·-n·"${defaul | ||
| 0003cec0:· | 0003cec0:·7456·616c·7565·7d22·205d·2026·616d·703b··tValue}"·]·& | ||
| 0003ced0:· | 0003ced0:·2661·6d70·3b20·6465·6661·756c·7456·616c··&·defaultVal | ||
| 0003cee0:· | 0003cee0:·7565·3d22·3d24·7b64·6566·6175·6c74·5661··ue="=${defaultVa | ||
| 0003cef0:·6 | 0003cef0:·6c75·657d·220a·0a20·2020·2023·2066·6978··lue}"..····#·fix | ||
| 0003cf00:·202 | 0003cf00:·2027·7479·7065·2720·6966·2069·7427·7320···'type'·if·it's· | ||
| 0003cf10:· | 0003cf10:·7772·6f6e·670a·2020·2020·6966·2067·7265··wrong.····if·gre | ||
| 0003cf20:· | 0003cf20:·7020·2d71·202d·5020·225e·5c5c·732a·283f··p·-q·-P·"^\\s*(? | ||
| 0003cf30:· | 0003cf30:·2227·2127·2270·6173·7377·6f72·645c·5c73··"'!'"password\\s | ||
| 0003cf40:· | 0003cf40:·295b·5b3a·616c·6e75·6d3a·5d5d·2b5c·5c73··)[[:alnum:]]+\\s | ||
| 0003cf50:· | 0003cf50:·2b5b·5b3a·616c·6e75·6d3a·5d5d·2b5c·5c73··+[[:alnum:]]+\\s | ||
| 0003cf60:·616d·5f75·6e69·78 | 0003cf60:·2b70·616d·5f75·6e69·782e·736f·2220·266c··+pam_unix.so"·&l | ||
| 0003cf70:· | 0003cf70:·743b·2022·2f65·7463·2f70·616d·2e64·2f63··t;·"/etc/pam.d/c | ||
| 0003cf80:· | 0003cf80:·6f6d·6d6f·6e2d·7061·7373·776f·7264·2220··ommon-password"· | ||
| 0003cf90:· | 0003cf90:·3b20·7468·656e·0a20·2020·2020·2020·2073··;·then.········s | ||
| 0003cfa0:·6 | 0003cfa0:·6564·202d·2d66·6f6c·6c6f·772d·7379·6d6c··ed·--follow-syml | ||
| 0003cfb0:· | 0003cfb0:·696e·6b73·202d·6920·2d45·202d·6520·2273··inks·-i·-E·-e·"s | ||
| 0003cfc0:· | 0003cfc0:·2f5e·285c·5c73·2a29·5b5b·3a61·6c6e·756d··/^(\\s*)[[:alnum | ||
| 0003cfd0:· | 0003cfd0:·3a5d·5d2b·285c·5c73·2b5b·5b3a·616c·6e75··:]]+(\\s+[[:alnu | ||
| 0003cfe0:·6 | 0003cfe0:·6d3a·5d5d·2b5c·5c73·2b70·616d·5f75·6e69··m:]]+\\s+pam_uni | ||
| 0003cff0:· | 0003cff0:·782e·736f·292f·5c5c·3170·6173·7377·6f72··x.so)/\\1passwor | ||
| 0003d000:· | 0003d000:·645c·5c32·2f22·2022·2f65·7463·2f70·616d··d\\2/"·"/etc/pam | ||
| 0003d010:· | 0003d010:·2e64·2f63·6f6d·6d6f·6e2d·7061·7373·776f··.d/common-passwo | ||
| 0003d020:· | 0003d020:·7264·220a·2020·2020·6669·0a0a·2020·2020··rd".····fi..···· | ||
| 0003d030:· | 0003d030:·2320·6669·7820·2763·6f6e·7472·6f6c·2720··#·fix·'control'· | ||
| 0003d040:·6 | 0003d040:·6966·2069·7427·7320·7772·6f6e·670a·2020··if·it's·wrong.·· | ||
| 0003d050:· | 0003d050:·2020·6966·2067·7265·7020·2d71·202d·5020····if·grep·-q·-P· | ||
| 0003d060:· | 0003d060:·225e·5c5c·732a·7061·7373·776f·7264·5c5c··"^\\s*password\\ | ||
| 0003d070:· | 0003d070:·732b·283f·2227·2127·225c·5b73·7563·6365··s+(?"'!'"\[succe | ||
| 0003d080:· | 0003d080:·7373·3d5b·5b3a·616c·6e75·6d3a·5d5d·2e2a··ss=[[:alnum:]].* | ||
| 0003d090:· | 0003d090:·5c5d·295b·5b3a·616c·6e75·6d3a·5d5d·2b5c··\])[[:alnum:]]+\ | ||
| 0003d0a0:· | 0003d0a0:·5c73·2b70·616d·5f75·6e69·782e·736f·2220··\s+pam_unix.so"· | ||
| 0003d0b0:· | 0003d0b0:·266c·743b·2022·2f65·7463·2f70·616d·2e64··<·"/etc/pam.d | ||
| 0003d0c0:· | 0003d0c0:·2f63·6f6d·6d6f·6e2d·7061·7373·776f·7264··/common-password | ||
| 0003d0d0:·20 | 0003d0d0:·2220·3b20·7468·656e·0a20·2020·2020·2020··"·;·then.······· | ||
| 0003d0e0:· | 0003d0e0:·2073·6564·202d·2d66·6f6c·6c6f·772d·7379···sed·--follow-sy | ||
| 0003d0f0:·6 | 0003d0f0:·6d6c·696e·6b73·202d·6920·2d45·202d·6520··mlinks·-i·-E·-e· | ||
| 0003d100:· | 0003d100:·2273·2f5e·285c·5c73·2a70·6173·7377·6f72··"s/^(\\s*passwor | ||
| 0003d110:·6 | 0003d110:·645c·5c73·2b29·5b5b·3a61·6c6e·756d·3a5d··d\\s+)[[:alnum:] | ||
| 0003d120:· | 0003d120:·5d2b·285c·5c73·2b70·616d·5f75·6e69·782e··]+(\\s+pam_unix. | ||
| 0003d130:· | 0003d130:·736f·292f·5c5c·315c·5b73·7563·6365·7373··so)/\\1\[success | ||
| 0003d140:· | 0003d140:·3d5b·5b3a·616c·6e75·6d3a·5d5d·2e2a·5c5d··=[[:alnum:]].*\] | ||
| 0003d150:· | 0003d150:·5c5c·322f·2220·222f·6574·632f·7061·6d2e··\\2/"·"/etc/pam. | ||
| 0003d160:· | 0003d160:·642f·636f·6d6d·6f6e·2d70·6173·7377·6f72··d/common-passwor | ||
| 0003d170:· | 0003d170:·6422·0a20·2020·2066·690a·0a20·2020·2023··d".····fi..····# | ||
| 0003d180:·2 | 0003d180:·2066·6978·2074·6865·2076·616c·7565·2066···fix·the·value·f | ||
| 0003d190:· | 0003d190:·6f72·2027·6f70·7469·6f6e·2720·6966·206f··or·'option'·if·o | ||
| 0003d1a0:· | 0003d1a0:·6e65·2065·7869·7374·7320·6275·7420·646f··ne·exists·but·do | ||
| 0003d1b0:· | 0003d1b0:·6573·206e·6f74·206d·6174·6368·2027·7661··es·not·match·'va | ||
| 0003d1c0:· | 0003d1c0:·6c75·6552·6567·6578·270a·2020·2020·6966··lueRegex'.····if | ||
| 0003d1d0:·0 | 0003d1d0:·2067·7265·7020·2d71·202d·5020·225e·5c5c···grep·-q·-P·"^\\ | ||
| 0003d1e0:·73 | 0003d1e0:·732a·7061·7373·776f·7264·5c5c·732b·5c5b··s*password\\s+\[ | ||
| 0003d1f0:·7 | 0003d1f0:·7375·6363·6573·733d·5b5b·3a61·6c6e·756d··success=[[:alnum | ||
| 0003d200:· | 0003d200:·3a5d·5d2e·2a5c·5d5c·5c73·2b70·616d·5f75··:]].*\]\\s+pam_u | ||
| 0003d210:· | 0003d210:·6e69·782e·736f·285c·5c73·2e2b·293f·5c5c··nix.so(\\s.+)?\\ | ||
| 0003d220:·7 | 0003d220:·732b·7265·6d65·6d62·6572·283f·2227·2127··s+remember(?"'!' | ||
| 0003d230:· | 0003d230:·2224·7b76·616c·7565·5265·6765·787d·285c··"${valueRegex}(\ | ||
| Max diff block lines reached; 1366740/1423374 bytes (96.02%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 177, 14 lines modified | Offset 177, 76 lines modified | ||
| 177 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 177 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 178 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(f),·IA-5(1)(e) | 178 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(f),·IA-5(1)(e) |
| 179 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 | 179 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 |
| 180 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.5 | 180 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.5 |
| 181 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000077-GPOS-00045 | 181 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000077-GPOS-00045 |
| 182 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R31 | 182 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R31 |
| 183 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.7 | 183 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.7 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 186 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·| | ||
| 187 | grep·-q·installed;·then | ||
| 188 | var_password_pam_unix_remember='2' | ||
| 189 | if·[·-e·"/etc/pam.d/common-password"·]·;·then | ||
| 190 | ····valueRegex="$var_password_pam_unix_remember" | ||
| 191 | defaultValue="$var_password_pam_unix_remember" | ||
| 192 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 193 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 194 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 195 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 196 | ····#·fix·'type'·if·it's·wrong | ||
| 197 | ····if·grep·-q·-P·"^\\s*(?"'!'"password\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_unix.so"·<·"/ | ||
| 198 | etc/pam.d/common-password"·;·then | ||
| 199 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum: | ||
| 200 | ]]+\\s+pam_unix.so)/\\1password\\2/"·"/etc/pam.d/common-password" | ||
| 201 | ····fi | ||
| 202 | ····#·fix·'control'·if·it's·wrong | ||
| 203 | ····if·grep·-q·-P·"^\\s*password\\s+(?"'!'"\[success=[[:alnum:]].*\])[[:alnum: | ||
| 204 | ]]+\\s+pam_unix.so"·<·"/etc/pam.d/common-password"·;·then | ||
| 205 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+)[[:alnum:]]+(\\s+pam_unix.so)/ | ||
| 206 | \\1\[success=[[:alnum:]].*\]\\2/"·"/etc/pam.d/common-password" | ||
| 207 | ····fi | ||
| 208 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 209 | ····if·grep·-q·-P·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so | ||
| 210 | (\\s.+)?\\s+remember(?"'!'"${valueRegex}(\\s|\$))"·<·"/etc/pam.d/common-password"·;·then | ||
| 211 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+\[success=[[:alnum: | ||
| 212 | ]].*\]\\s+pam_unix.so(\\s.+)?\\s)remember=[^[:space:]]*/\\1remember${defaultValue}/"·"/etc/ | ||
| 213 | pam.d/common-password" | ||
| 214 | ····#·add·'option=default'·if·option·is·not·set | ||
| 215 | ····elif·grep·-q·-E·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so"·<·"/etc/ | ||
| 216 | pam.d/common-password"·&& | ||
| 217 | ············grep····-E·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so"·<·"/etc/ | ||
| 218 | pam.d/common-password"·|·grep·-q·-E·-v·"\\sremember(=|\\s|\$)"·;·then | ||
| 219 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+\[success=[[:alnum: | ||
| 220 | ]].*\]\\s+pam_unix.so[^\\n]*)/\\1·remember${defaultValue}/"·"/etc/pam.d/common-password" | ||
| 221 | ····#·add·a·new·entry·if·none·exists | ||
| 222 | ····elif·!·grep·-q·-P·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so | ||
| 223 | (\\s.+)?\\s+remember${valueRegex}(\\s|\$)"·<·"/etc/pam.d/common-password"·;·then | ||
| 224 | ········echo·"password·\[success=[[:alnum:]].*\]·pam_unix.so·remember${defaultValue}"·>>·"/ | ||
| 225 | etc/pam.d/common-password" | ||
| 226 | ····fi | ||
| 227 | else | ||
| 228 | ····echo·"/etc/pam.d/common-password·doesn't·exist"·>&2 | ||
| 229 | fi | ||
| 230 | else | ||
| 231 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 232 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 189 | -·name:·Gather·the·package·facts | 238 | -·name:·Gather·the·package·facts |
| 190 | ··package_facts: | 239 | ··package_facts: |
| Offset 279, 76 lines modified | Offset 341, 14 lines modified | ||
| 279 | ··-·PCI-DSSv4-8.3.7 | 341 | ··-·PCI-DSSv4-8.3.7 |
| 280 | ··-·accounts_password_pam_unix_remember | 342 | ··-·accounts_password_pam_unix_remember |
| 281 | ··-·configure_strategy | 343 | ··-·configure_strategy |
| 282 | ··-·low_complexity | 344 | ··-·low_complexity |
| 283 | ··-·medium_disruption | 345 | ··-·medium_disruption |
| 284 | ··-·medium_severity | 346 | ··-·medium_severity |
| 285 | ··-·no_reboot_needed | 347 | ··-·no_reboot_needed |
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 287 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 288 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·| | ||
| 289 | grep·-q·installed;·then | ||
| 290 | var_password_pam_unix_remember='2' | ||
| 291 | if·[·-e·"/etc/pam.d/common-password"·]·;·then | ||
| 292 | ····valueRegex="$var_password_pam_unix_remember" | ||
| 293 | defaultValue="$var_password_pam_unix_remember" | ||
| 294 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 295 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 296 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 297 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 298 | ····#·fix·'type'·if·it's·wrong | ||
| 299 | ····if·grep·-q·-P·"^\\s*(?"'!'"password\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_unix.so"·<·"/ | ||
| 300 | etc/pam.d/common-password"·;·then | ||
| 301 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum: | ||
| 302 | ]]+\\s+pam_unix.so)/\\1password\\2/"·"/etc/pam.d/common-password" | ||
| 303 | ····fi | ||
| Max diff block lines reached; 109066/116730 bytes (93.43%) of diff not shown. | |||
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037d20:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00037d20:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 16001, 146 lines modified | Offset 16001, 146 lines modified | ||
| 0003e800:·6172·6765·743d·2223·6964·6d34·3033·3422··arget="#idm4034" | 0003e800:·6172·6765·743d·2223·6964·6d34·3033·3422··arget="#idm4034" | ||
| 0003e810:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003e810:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003e820:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003e820:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003e830:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003e830:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003e840:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003e840:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003e850:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003e850:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003e860:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003e860:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003e870:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003e880:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003e890:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003e8a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003e8b0:·6964·3d22·6964·6d34·3033·3422·3e3c·7461··id="idm4034"><ta | |||
| 0003e8c0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003e8d0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003e8e0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003e8f0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003e900:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003e910:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003e920:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003e930:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003e940:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003e950:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003e960:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003e970:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003e980:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003e990:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003e9a0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003e9b0:·3e3c·636f·6465·3e0a·666f·7220·6620·696e··><code>.for·f·in | |||
| 0003e9c0:·202f·6574·632f·7375·646f·6572·7320·2f65···/etc/sudoers·/e | |||
| 0003e9d0:·7463·2f73·7564·6f65·7273·2e64·2f2a·203b··tc/sudoers.d/*·; | |||
| 0003e9e0:·2064·6f0a·2020·6966·205b·2021·202d·6520···do.··if·[·!·-e· | |||
| 0003e9f0:·2224·6622·205d·203b·2074·6865·6e0a·2020··"$f"·]·;·then.·· | |||
| 0003ea00:·2020·636f·6e74·696e·7565·0a20·2066·690a····continue.··fi. | |||
| 0003ea10:·2020·6d61·7463·6869·6e67·5f6c·6973·743d····matching_list= | |||
| 0003ea20:·2428·6772·6570·202d·5020·275e·283f·2123··$(grep·-P·'^(?!# | |||
| 0003ea30:·292e·2a5b·5c73·5d2b·5c21·6175·7468·656e··).*[\s]+\!authen | |||
| 0003ea40:·7469·6361·7465·2e2a·2427·2024·6620·7c20··ticate.*$'·$f·|· | |||
| 0003ea50:·756e·6971·2029·0a20·2069·6620·2120·7465··uniq·).··if·!·te | |||
| 0003ea60:·7374·202d·7a20·2224·6d61·7463·6869·6e67··st·-z·"$matching | |||
| 0003ea70:·5f6c·6973·7422·3b20·7468·656e·0a20·2020··_list";·then.··· | |||
| 0003ea80:·2077·6869·6c65·2049·4653·3d20·7265·6164···while·IFS=·read | |||
| 0003ea90:·202d·7220·656e·7472·793b·2064·6f0a·2020···-r·entry;·do.·· | |||
| 0003eaa0:·2020·2020·2320·636f·6d6d·656e·7420·6f75······#·comment·ou | |||
| 0003eab0:·7420·2221·6175·7468·656e·7469·6361·7465··t·"!authenticate | |||
| 0003eac0:·2220·6d61·7463·6865·7320·746f·2070·7265··"·matches·to·pre | |||
| 0003ead0:·7365·7276·6520·7573·6572·2064·6174·610a··serve·user·data. | |||
| 0003eae0:·2020·2020·2020·7365·6420·2d69·2022·732f········sed·-i·"s/ | |||
| 0003eaf0:·5e24·7b65·6e74·7279·7d24·2f23·2026·616d··^${entry}$/#·&am | |||
| 0003eb00:·703b·2f67·2220·2466·0a20·2020·2064·6f6e··p;/g"·$f.····don | |||
| 0003eb10:·6520·266c·743b·266c·743b·266c·743b·2022··e·<<<·" | |||
| 0003eb20:·246d·6174·6368·696e·675f·6c69·7374·220a··$matching_list". | |||
| 0003eb30:·0a20·2020·202f·7573·722f·7362·696e·2f76··.····/usr/sbin/v | |||
| 0003eb40:·6973·7564·6f20·2d63·6620·2466·2026·616d··isudo·-cf·$f·&am | |||
| 0003eb50:·703b·2667·743b·202f·6465·762f·6e75·6c6c··p;>·/dev/null | |||
| 0003eb60:·207c·7c20·6563·686f·2022·4661·696c·2074···||·echo·"Fail·t | |||
| 0003eb70:·6f20·7661·6c69·6461·7465·2024·6620·7769··o·validate·$f·wi | |||
| 0003eb80:·7468·2076·6973·7564·6f22·0a20·2066·690a··th·visudo".··fi. | |||
| 0003eb90:·646f·6e65·0a3c·2f63·6f64·653e·3c2f·7072··done.</code></pr | |||
| 0003eba0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ebb0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003ebc0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003ebd0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003ebe0:·6172·6765·743d·2223·6964·6d34·3033·3522··arget="#idm4035" | |||
| 0003ebf0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003ec00:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003ec10:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003ec20:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003ec30:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003ec40:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003e | 0003ec50:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003e | 0003ec60:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003e | 0003ec70:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003e | 0003ec80:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003e8b0:·6522·2069·643d·2269·646d·3430·3334·223e··e"·id="idm4034"> | |||
| 0003e8c0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003e8d0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003e8e0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003e8f0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003e900:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003e910:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003e920:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e930:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003e940:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003e950:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003e960:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003e970:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003e980:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003e990:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003e9a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003e9b0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003e9c0:·3a20·4669·6e64·202f·6574·632f·7375·646f··:·Find·/etc/sudo | |||
| 0003e9d0:·6572·732e·642f·2066·696c·6573·0a20·2061··ers.d/·files.··a | |||
| 0003e9e0:·6e73·6962·6c65·2e62·7569·6c74·696e·2e66··nsible.builtin.f | |||
| 0003e9f0:·696e·643a·0a20·2020·2070·6174·6873·3a0a··ind:.····paths:. | |||
| 0003ea00:·2020·2020·2d20·2f65·7463·2f73·7564·6f65······-·/etc/sudoe | |||
| 0003ea10:·7273·2e64·2f0a·2020·7265·6769·7374·6572··rs.d/.··register | |||
| 0003ea20:·3a20·7375·646f·6572·730a·2020·7461·6773··:·sudoers.··tags | |||
| 0003ea30:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 0003ea40:·332d·434d·2d36·2861·290a·2020·2d20·4e49··3-CM-6(a).··-·NI | |||
| 0003ea50:·5354·2d38·3030·2d35·332d·4941·2d31·310a··ST-800-53-IA-11. | |||
| 0003ea60:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003ea70:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003ea80:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003ea90:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003eaa0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003eab0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003eac0:·7465·6779·0a20·202d·2073·7564·6f5f·7265··tegy.··-·sudo_re | |||
| 0003ead0:·6d6f·7665·5f6e·6f5f·6175·7468·656e·7469··move_no_authenti | |||
| 0003eae0:·6361·7465·0a0a·2d20·6e61·6d65·3a20·5265··cate..-·name:·Re | |||
| 0003eaf0:·6d6f·7665·206c·696e·6573·2063·6f6e·7461··move·lines·conta | |||
| 0003eb00:·696e·696e·6720·2161·7574·6865·6e74·6963··ining·!authentic | |||
| Max diff block lines reached; 988646/1008572 bytes (98.02%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:12 | 41 | ····*·cpe:/o:debian:debian_linux:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 227, 14 lines modified | Offset 227, 35 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Find·/etc/sudoers.d/·files | 258 | -·name:·Find·/etc/sudoers.d/·files |
| 240 | ··ansible.builtin.find: | 259 | ··ansible.builtin.find: |
| Offset 265, 35 lines modified | Offset 286, 14 lines modified | ||
| 265 | ··-·NIST-800-53-IA-11 | 286 | ··-·NIST-800-53-IA-11 |
| 266 | ··-·low_complexity | 287 | ··-·low_complexity |
| 267 | ··-·low_disruption | 288 | ··-·low_disruption |
| 268 | ··-·medium_severity | 289 | ··-·medium_severity |
| 269 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 270 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 271 | ··-·sudo_remove_no_authenticate | 292 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 297 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 14 lines modified | Offset 314, 35 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Find·/etc/sudoers.d/·files | 345 | -·name:·Find·/etc/sudoers.d/·files |
| 327 | ··ansible.builtin.find: | 346 | ··ansible.builtin.find: |
| Offset 352, 35 lines modified | Offset 373, 14 lines modified | ||
| 352 | ··-·NIST-800-53-IA-11 | 373 | ··-·NIST-800-53-IA-11 |
| 353 | ··-·low_complexity | 374 | ··-·low_complexity |
| 354 | ··-·low_disruption | 375 | ··-·low_disruption |
| Max diff block lines reached; 121823/127556 bytes (95.51%) of diff not shown. | |||
| Offset 14286, 15 lines modified | Offset 14286, 15 lines modified | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d40:·3131·2d30·3 | 00037d40:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 16021, 146 lines modified | Offset 16021, 146 lines modified | ||
| 0003e940:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | 0003e940:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | ||
| 0003e950:·3033·3422·2074·6162·696e·6465·783d·2230··034"·tabindex="0 | 0003e950:·3033·3422·2074·6162·696e·6465·783d·2230··034"·tabindex="0 | ||
| 0003e960:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003e960:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003e970:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003e970:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003e980:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003e980:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003e990:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003e990:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003e9a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003e9a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003e9b0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003e9c0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003e9d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003e9e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003e9f0:·7365·2220·6964·3d22·6964·6d34·3033·3422··se"·id="idm4034" | |||
| 0003ea00:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003ea10:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ea20:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ea30:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ea40:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ea50:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ea60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ea70:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ea80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ea90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003eaa0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003eab0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003eac0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003ead0:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 0003eae0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003eaf0:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 0003eb00:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 0003eb10:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 0003eb20:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 0003eb30:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 0003eb40:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 0003eb50:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 0003eb60:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 0003eb70:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 0003eb80:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 0003eb90:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 0003eba0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 0003ebb0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 0003ebc0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 0003ebd0:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 0003ebe0:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 0003ebf0:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 0003ec00:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 0003ec10:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 0003ec20:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 0003ec30:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 0003ec40:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 0003ec50:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 0003ec60:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 0003ec70:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 0003ec80:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 0003ec90:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 0003eca0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 0003ecb0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 0003ecc0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 0003ecd0:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 0003ece0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ecf0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ed00:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ed10:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ed20:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | |||
| 0003ed30:·3033·3522·2074·6162·696e·6465·783d·2230··035"·tabindex="0 | |||
| 0003ed40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003ed50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003ed60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003ed70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ed80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003e | 0003ed90:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003e | 0003eda0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003e | 0003edb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003e | 0003edc0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003e | 0003edd0:·6c61·7073·6522·2069·643d·2269·646d·3430··lapse"·id="idm40 | ||
| 0003ea00:·3334·223e·3c74·6162·6c65·2063·6c61·7373··34"><table·class | |||
| 0003ea10:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ea20:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ea30:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ea40:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ea50:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ea60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ea70:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ea80:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003ea90:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003eaa0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003eab0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003eac0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003ead0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 0003eae0:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 0003eaf0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003eb00:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | |||
| 0003eb10:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | |||
| 0003eb20:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 0003eb30:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | |||
| 0003eb40:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | |||
| 0003eb50:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | |||
| 0003eb60:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | |||
| 0003eb70:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 0003eb80:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003eb90:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | |||
| 0003eba0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | |||
| 0003ebb0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003ebc0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003ebd0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003ebe0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003ebf0:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | |||
| 0003ec00:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | |||
| 0003ec10:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | |||
| 0003ec20:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | |||
| 0003ec30:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | |||
| 0003ec40:·6f6e·7461·696e·696e·6720·2161·7574·6865··ontaining·!authe | |||
| Max diff block lines reached; 1121266/1141192 bytes (98.25%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:12 | 42 | ····*·cpe:/o:debian:debian_linux:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 231, 14 lines modified | Offset 231, 35 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 243 | -·name:·Find·/etc/sudoers.d/·files | 262 | -·name:·Find·/etc/sudoers.d/·files |
| 244 | ··ansible.builtin.find: | 263 | ··ansible.builtin.find: |
| Offset 269, 35 lines modified | Offset 290, 14 lines modified | ||
| 269 | ··-·NIST-800-53-IA-11 | 290 | ··-·NIST-800-53-IA-11 |
| 270 | ··-·low_complexity | 291 | ··-·low_complexity |
| 271 | ··-·low_disruption | 292 | ··-·low_disruption |
| 272 | ··-·medium_severity | 293 | ··-·medium_severity |
| 273 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 275 | ··-·sudo_remove_no_authenticate | 296 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 303 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 14 lines modified | Offset 318, 35 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Find·/etc/sudoers.d/·files | 349 | -·name:·Find·/etc/sudoers.d/·files |
| 331 | ··ansible.builtin.find: | 350 | ··ansible.builtin.find: |
| Offset 356, 35 lines modified | Offset 377, 14 lines modified | ||
| 356 | ··-·NIST-800-53-IA-11 | 377 | ··-·NIST-800-53-IA-11 |
| 357 | ··-·low_complexity | 378 | ··-·low_complexity |
| 358 | ··-·low_disruption | 379 | ··-·low_disruption |
| Max diff block lines reached; 137371/143109 bytes (95.99%) of diff not shown. | |||
| Offset 14279, 15 lines modified | Offset 14279, 15 lines modified | ||
| 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037cd0:·342d·3131·2d30·3 | 00037cd0:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 14776, 146 lines modified | Offset 14776, 146 lines modified | ||
| 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | ||
| 00039b80:·3033·3422·2074·6162·696e·6465·783d·2230··034"·tabindex="0 | 00039b80:·3033·3422·2074·6162·696e·6465·783d·2230··034"·tabindex="0 | ||
| 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039be0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00039bf0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00039c00:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039c10:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039c20:·7365·2220·6964·3d22·6964·6d34·3033·3422··se"·id="idm4034" | |||
| 00039c30:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039c40:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039c50:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039c60:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039c70:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039c80:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039c90:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039ca0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039cb0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039cc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039cd0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039ce0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039cf0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039d00:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 00039d10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039d20:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 00039d30:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 00039d40:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 00039d50:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 00039d60:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 00039d70:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 00039d80:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 00039d90:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 00039da0:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 00039db0:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 00039dc0:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 00039dd0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 00039de0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 00039df0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 00039e00:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 00039e10:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 00039e20:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 00039e30:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 00039e40:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 00039e50:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 00039e60:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 00039e70:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 00039e80:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 00039e90:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 00039ea0:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 00039eb0:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 00039ec0:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 00039ed0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 00039ee0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 00039ef0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 00039f00:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 00039f10:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f20:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f30:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f40:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f50:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | |||
| 00039f60:·3033·3522·2074·6162·696e·6465·783d·2230··035"·tabindex="0 | |||
| 00039f70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039f80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039f90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fa0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039 | 00039fc0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 00039 | 00039fd0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039 | 00039fe0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039 | 00039ff0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00039c20:·6c61·7073·6522·2069·643d·2269·646d·3430··lapse"·id="idm40 | |||
| 00039c30:·3334·223e·3c74·6162·6c65·2063·6c61·7373··34"><table·class | |||
| 00039c40:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039c50:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00039c60:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00039c70:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039c80:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039c90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039ca0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039cb0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039cc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039cd0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039ce0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00039cf0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00039d00:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 00039d10:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 00039d20:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039d30:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | |||
| 00039d40:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | |||
| 00039d50:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 00039d60:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | |||
| 00039d70:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | |||
| 00039d80:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | |||
| 00039d90:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | |||
| 00039da0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00039dc0:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | |||
| 00039dd0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | |||
| 00039de0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 00039df0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 00039e00:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 00039e10:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 00039e20:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | |||
| 00039e30:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | |||
| 00039e40:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | |||
| 00039e50:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | |||
| 00039e60:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | |||
| 00039e70:·6f6e·7461·696e·696e·6720·2161·7574·6865··ontaining·!authe | |||
| Max diff block lines reached; 351660/371586 bytes (94.64%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:debian:debian_linux:12 | 40 | ····*·cpe:/o:debian:debian_linux:12 |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 91, 14 lines modified | Offset 91, 35 lines modified | ||
| 91 | ···························1.7,·SR·1.8,·SR·1.9 | 91 | ···························1.7,·SR·1.8,·SR·1.9 |
| 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 97 | ···························SRG-OS-000373-GPOS-00158 | 97 | ···························SRG-OS-000373-GPOS-00158 |
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 103 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 104 | ··if·[·!·-e·"$f"·]·;·then | ||
| 105 | ····continue | ||
| 106 | ··fi | ||
| 107 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 108 | ··if·!·test·-z·"$matching_list";·then | ||
| 109 | ····while·IFS=·read·-r·entry;·do | ||
| 110 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 111 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 112 | ····done·<<<·"$matching_list" | ||
| 113 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 114 | visudo" | ||
| 115 | ··fi | ||
| 116 | done | ||
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 103 | -·name:·Find·/etc/sudoers.d/·files | 122 | -·name:·Find·/etc/sudoers.d/·files |
| 104 | ··ansible.builtin.find: | 123 | ··ansible.builtin.find: |
| Offset 129, 35 lines modified | Offset 150, 14 lines modified | ||
| 129 | ··-·NIST-800-53-IA-11 | 150 | ··-·NIST-800-53-IA-11 |
| 130 | ··-·low_complexity | 151 | ··-·low_complexity |
| 131 | ··-·low_disruption | 152 | ··-·low_disruption |
| 132 | ··-·medium_severity | 153 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 134 | ··-·restrict_strategy | 155 | ··-·restrict_strategy |
| 135 | ··-·sudo_remove_no_authenticate | 156 | ··-·sudo_remove_no_authenticate |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 141 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 142 | ··if·[·!·-e·"$f"·]·;·then | ||
| 143 | ····continue | ||
| 144 | ··fi | ||
| 145 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 146 | ··if·!·test·-z·"$matching_list";·then | ||
| 147 | ····while·IFS=·read·-r·entry;·do | ||
| 148 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 149 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 150 | ····done·<<<·"$matching_list" | ||
| 151 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 152 | visudo" | ||
| 153 | ··fi | ||
| 154 | done | ||
| 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 156 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 158 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 159 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 158 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 160 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 159 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 161 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 160 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 162 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 161 | ············Without·re-authentication,·users·may·access·resources·or·perform | 163 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 178, 14 lines modified | Offset 178, 35 lines modified | ||
| 178 | ···························1.7,·SR·1.8,·SR·1.9 | 178 | ···························1.7,·SR·1.8,·SR·1.9 |
| 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 184 | ···························SRG-OS-000373-GPOS-00158 | 184 | ···························SRG-OS-000373-GPOS-00158 |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 191 | ··if·[·!·-e·"$f"·]·;·then | ||
| 192 | ····continue | ||
| 193 | ··fi | ||
| 194 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 195 | ··if·!·test·-z·"$matching_list";·then | ||
| 196 | ····while·IFS=·read·-r·entry;·do | ||
| 197 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 198 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 199 | ····done·<<<·"$matching_list" | ||
| 200 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 201 | visudo" | ||
| 202 | ··fi | ||
| 203 | done | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 190 | -·name:·Find·/etc/sudoers.d/·files | 209 | -·name:·Find·/etc/sudoers.d/·files |
| 191 | ··ansible.builtin.find: | 210 | ··ansible.builtin.find: |
| Offset 216, 35 lines modified | Offset 237, 14 lines modified | ||
| 216 | ··-·NIST-800-53-IA-11 | 237 | ··-·NIST-800-53-IA-11 |
| 217 | ··-·low_complexity | 238 | ··-·low_complexity |
| 218 | ··-·low_disruption | 239 | ··-·low_disruption |
| Max diff block lines reached; 46457/52173 bytes (89.04%) of diff not shown. | |||
| Offset 14283, 15 lines modified | Offset 14283, 15 lines modified | ||
| 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037d10:·342d·3131·2d30·3 | 00037d10:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 16011, 147 lines modified | Offset 16011, 147 lines modified | ||
| 0003e8a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003e8a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003e8b0:·743d·2223·6964·6d34·3033·3422·2074·6162··t="#idm4034"·tab | 0003e8b0:·743d·2223·6964·6d34·3033·3422·2074·6162··t="#idm4034"·tab | ||
| 0003e8c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003e8c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003e8d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003e8d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003e8e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003e8e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003e8f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003e8f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003e900:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003e900:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003e910:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003e920:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003e930:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003e940:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003e950:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003e960:·6964·6d34·3033·3422·3e3c·7461·626c·6520··idm4034"><table· | |||
| 0003e970:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003e980:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003e990:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003e9a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003e9b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003e9c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003e9d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003e9e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003e9f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ea00:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003ea10:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003ea20:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003ea30:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 0003ea40:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 0003ea50:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ea60:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 0003ea70:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 0003ea80:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 0003ea90:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 0003eaa0:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 0003eab0:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 0003eac0:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 0003ead0:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 0003eae0:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 0003eaf0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 0003eb00:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 0003eb10:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 0003eb20:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 0003eb30:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 0003eb40:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 0003eb50:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 0003eb60:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 0003eb70:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 0003eb80:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 0003eb90:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 0003eba0:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 0003ebb0:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 0003ebc0:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 0003ebd0:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 0003ebe0:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 0003ebf0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 0003ec00:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 0003ec10:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 0003ec20:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 0003ec30:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 0003ec40:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ec50:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ec60:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ec70:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ec80:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ec90:·743d·2223·6964·6d34·3033·3522·2074·6162··t="#idm4035"·tab | |||
| 0003eca0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003ecb0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ecc0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003ecd0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003ece0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003e | 0003ecf0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003e | 0003ed00:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003e | 0003ed10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003e | 0003ed20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003e | 0003ed30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003e | 0003ed40:·643d·2269·646d·3430·3335·223e·3c74·6162··d="idm4035"><tab | ||
| 0003e | 0003ed50:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003e | 0003ed60:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003e | 0003ed70:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003e | 0003ed80:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003e | 0003ed90:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003e9c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e9d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003e9e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003e9f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ea00:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ea10:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003ea20:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003ea30:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003ea40:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003ea50:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ea60:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 0003ea70:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 0003ea80:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 0003ea90:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 0003eaa0:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 0003eab0:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 0003eac0:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 0003ead0:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 0003eae0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003eaf0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 0003eb00:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 0003eb10:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003eb20:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003eb30:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003eb40:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003eb50:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 0003eb60:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 0003eb70:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 0003eb80:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 0003eb90:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 0003eba0:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| Max diff block lines reached; 1079286/1099350 bytes (98.17%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:12 | 41 | ····*·cpe:/o:debian:debian_linux:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 229, 14 lines modified | Offset 229, 35 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Find·/etc/sudoers.d/·files | 260 | -·name:·Find·/etc/sudoers.d/·files |
| 242 | ··ansible.builtin.find: | 261 | ··ansible.builtin.find: |
| Offset 267, 35 lines modified | Offset 288, 14 lines modified | ||
| 267 | ··-·NIST-800-53-IA-11 | 288 | ··-·NIST-800-53-IA-11 |
| 268 | ··-·low_complexity | 289 | ··-·low_complexity |
| 269 | ··-·low_disruption | 290 | ··-·low_disruption |
| 270 | ··-·medium_severity | 291 | ··-·medium_severity |
| 271 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 273 | ··-·sudo_remove_no_authenticate | 294 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 14 lines modified | Offset 316, 35 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 328 | -·name:·Find·/etc/sudoers.d/·files | 347 | -·name:·Find·/etc/sudoers.d/·files |
| 329 | ··ansible.builtin.find: | 348 | ··ansible.builtin.find: |
| Offset 354, 35 lines modified | Offset 375, 14 lines modified | ||
| 354 | ··-·NIST-800-53-IA-11 | 375 | ··-·NIST-800-53-IA-11 |
| 355 | ··-·low_complexity | 376 | ··-·low_complexity |
| 356 | ··-·low_disruption | 377 | ··-·low_disruption |
| Max diff block lines reached; 133682/139408 bytes (95.89%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037d30:·3230·3234·2d31·312d·303 | 00037d30:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 16220, 736 lines modified | Offset 16220, 736 lines modified | ||
| 0003f5b0:·6172·6765·743d·2223·6964·6d31·3033·3533··arget="#idm10353 | 0003f5b0:·6172·6765·743d·2223·6964·6d31·3033·3533··arget="#idm10353 | ||
| 0003f5c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003f5c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003f5d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003f5d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003f5e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003f5e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003f5f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003f5f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003f600:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003f600:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (722 lines added, 722 lines removed) | |
| 0003f610:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003f610:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003f620:·696f·6e20· | 0003f620:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 0003f630:· | 0003f630:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003f640:· | 0003f640:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003f650:· | 0003f650:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003f660:· | 0003f660:·2069·643d·2269·646d·3130·3335·3322·3e3c···id="idm10353">< | ||
| 0003f670:·2 | 0003f670:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003f680:· | 0003f680:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003f690:· | 0003f690:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0003f6a0:· | 0003f6a0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0003f6b0:·6 | 0003f6b0:·6966·205b·2021·202d·6620·2f2e·646f·636b··if·[·!·-f·/.dock | ||
| 0003f6c0:·6 | 0003f6c0:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | ||
| 0003f6d0:· | 0003f6d0:·703b·205b·2021·202d·6620·2f72·756e·2f2e··p;·[·!·-f·/run/. | ||
| 0003f6e0:· | 0003f6e0:·636f·6e74·6169·6e65·7265·6e76·205d·3b20··containerenv·];· | ||
| 0003f6f0:· | 0003f6f0:·7468·656e·0a0a·2320·4c69·7374·206f·6620··then..#·List·of· | ||
| 0003f700:· | 0003f700:·6c6f·6720·6669·6c65·2070·6174·6873·2074··log·file·paths·t | ||
| 0003f710:· | 0003f710:·6f20·6265·2069·6e73·7065·6374·6564·2066··o·be·inspected·f | ||
| 0003f720:· | 0003f720:·6f72·2063·6f72·7265·6374·2070·6572·6d69··or·correct·permi | ||
| 0003f730:· | 0003f730:·7373·696f·6e73·0a23·202a·2050·7269·6d61··ssions.#·*·Prima | ||
| 0003f740:· | 0003f740:·7269·6c79·2069·6e73·7065·6374·206c·6f67··rily·inspect·log | ||
| 0003f750:· | 0003f750:·2066·696c·6520·7061·7468·7320·6c69·7374···file·paths·list | ||
| 0003f760:·6 | 0003f760:·6564·2069·6e20·2f65·7463·2f72·7379·736c··ed·in·/etc/rsysl | ||
| 0003f770:· | 0003f770:·6f67·2e63·6f6e·660a·5253·5953·4c4f·475f··og.conf.RSYSLOG_ | ||
| 0003f780:· | 0003f780:·4554·435f·434f·4e46·4947·3d22·2f65·7463··ETC_CONFIG="/etc | ||
| 0003f790:· | 0003f790:·2f72·7379·736c·6f67·2e63·6f6e·6622·0a23··/rsyslog.conf".# | ||
| 0003f7a0:· | 0003f7a0:·202a·2041·6e64·2061·6c73·6f20·7468·6520···*·And·also·the· | ||
| 0003f7b0:· | 0003f7b0:·6c6f·6720·6669·6c65·2070·6174·6873·206c··log·file·paths·l | ||
| 0003f7c0:·6 | 0003f7c0:·6973·7465·6420·6166·7465·7220·7273·7973··isted·after·rsys | ||
| 0003f7d0:·6 | 0003f7d0:·6c6f·6727·7320·2449·6e63·6c75·6465·436f··log's·$IncludeCo | ||
| 0003f7e0:·6 | 0003f7e0:·6e66·6967·2064·6972·6563·7469·7665·0a23··nfig·directive.# | ||
| 0003f7f0:· | 0003f7f0:·2020·2028·7374·6f72·6520·7468·6520·7265·····(store·the·re | ||
| 0003f800:· | 0003f800:·7375·6c74·2069·6e74·6f20·6172·7261·7920··sult·into·array· | ||
| 0003f810:· | 0003f810:·666f·7220·7468·6520·6361·7365·2074·6865··for·the·case·the | ||
| 0003f820:· | 0003f820:·7265·2773·2073·6865·6c6c·2067·6c6f·6220··re's·shell·glob· | ||
| 0003f830:·75 | 0003f830:·7573·6564·2061·7320·7661·6c75·6520·6f66··used·as·value·of | ||
| 0003f840:· | 0003f840:·2049·6e63·6c75·6465·436f·6e66·6967·290a···IncludeConfig). | ||
| 0003f850:· | 0003f850:·7265·6164·6172·7261·7920·2d74·204f·4c44··readarray·-t·OLD | ||
| 0003f860:· | 0003f860:·5f49·4e43·2026·6c74·3b20·266c·743b·2867··_INC·<·<(g | ||
| 0003f870:· | 0003f870:·7265·7020·2d65·2022·5c24·496e·636c·7564··rep·-e·"\$Includ | ||
| 0003f880:· | 0003f880:·6543·6f6e·6669·675b·5b3a·7370·6163·653a··eConfig[[:space: | ||
| 0003f890:· | 0003f890:·5d5d·5c2b·5b5e·5b3a·7370·6163·653a·5d3b··]]\+[^[:space:]; | ||
| 0003f8a0:·5 | 0003f8a0:·5d5c·2b22·202f·6574·632f·7273·7973·6c6f··]\+"·/etc/rsyslo | ||
| 0003f8b0:· | 0003f8b0:·672e·636f·6e66·207c·2063·7574·202d·6420··g.conf·|·cut·-d· | ||
| 0003f8c0:· | 0003f8c0:·2720·2720·2d66·2032·290a·7265·6164·6172··'·'·-f·2).readar | ||
| 0003f8d0:· | 0003f8d0:·7261·7920·2d74·2052·5359·534c·4f47·5f49··ray·-t·RSYSLOG_I | ||
| 0003f8e0:· | 0003f8e0:·4e43·4c55·4445·5f43·4f4e·4649·4720·266c··NCLUDE_CONFIG·&l | ||
| 0003f8f0:· | 0003f8f0:·743b·2026·6c74·3b28·666f·7220·494e·4350··t;·<(for·INCP | ||
| 0003f900:· | 0003f900:·4154·4820·696e·2022·247b·4f4c·445f·494e··ATH·in·"${OLD_IN | ||
| 0003f910:· | 0003f910:·435b·405d·7d22·3b20·646f·2065·7661·6c20··C[@]}";·do·eval· | ||
| 0003f920:· | 0003f920:·7072·696e·7466·2027·2573·5c5c·6e27·2022··printf·'%s\\n'·" | ||
| 0003f930:· | 0003f930:·247b·494e·4350·4154·487d·223b·2064·6f6e··${INCPATH}";·don | ||
| 0003f940:· | 0003f940:·6529·0a72·6561·6461·7272·6179·202d·7420··e).readarray·-t· | ||
| 0003f950:· | 0003f950:·4e45·575f·494e·4320·266c·743b·2026·6c74··NEW_INC·<·< | ||
| 0003f960:· | 0003f960:·3b28·7365·6420·2d6e·2027·2f5e·5c73·2a69··;(sed·-n·'/^\s*i | ||
| 0003f970:·6 | 0003f970:·6e63·6c75·6465·282f·2c2f·292f·4970·2720··nclude(/,/)/Ip'· | ||
| 0003f980:·2 | 0003f980:·2f65·7463·2f72·7379·736c·6f67·2e63·6f6e··/etc/rsyslog.con | ||
| 0003f990:·6 | 0003f990:·6620·7c20·7365·6420·2d6e·2027·7340·2e2a··f·|·sed·-n·'s@.* | ||
| 0003f9a0:·6 | 0003f9a0:·6669·6c65·5c73·2a3d·5c73·2a22·5c28·5b2f··file\s*=\s*"\([/ | ||
| 0003f9b0:· | 0003f9b0:·5b3a·616c·6e75·6d3a·5d5b·3a70·756e·6374··[:alnum:][:punct | ||
| 0003f9c0:· | 0003f9c0:·3a5d·5d2a·5c29·222e·2a40·5c31·4049·7027··:]]*\)".*@\1@Ip' | ||
| 0003f9d0:· | 0003f9d0:·290a·7265·6164·6172·7261·7920·2d74·2052··).readarray·-t·R | ||
| 0003f9e0:· | 0003f9e0:·5359·534c·4f47·5f49·4e43·4c55·4445·2026··SYSLOG_INCLUDE·& | ||
| 0003f9f0:· | 0003f9f0:·6c74·3b20·266c·743b·2866·6f72·2049·4e43··lt;·<(for·INC | ||
| 0003fa00:· | 0003fa00:·5041·5448·2069·6e20·2224·7b4e·4557·5f49··PATH·in·"${NEW_I | ||
| 0003fa10:· | 0003fa10:·4e43·5b40·5d7d·223b·2064·6f20·6576·616c··NC[@]}";·do·eval | ||
| 0003fa20:· | 0003fa20:·2070·7269·6e74·6620·2725·735c·5c6e·2720···printf·'%s\\n'· | ||
| 0003fa30:·2 | 0003fa30:·2224·7b49·4e43·5041·5448·7d22·3b20·646f··"${INCPATH}";·do | ||
| 0003fa40:· | 0003fa40:·6e65·290a·0a23·2044·6563·6c61·7265·2061··ne)..#·Declare·a | ||
| 0003fa50:· | 0003fa50:·6e20·6172·7261·7920·746f·2068·6f6c·6420··n·array·to·hold· | ||
| 0003fa60:·686 | 0003fa60:·7468·6520·6669·6e61·6c20·6c69·7374·206f··the·final·list·o | ||
| 0003fa70:· | 0003fa70:·6620·6469·6666·6572·656e·7420·6c6f·6720··f·different·log· | ||
| 0003fa80:·6 | 0003fa80:·6669·6c65·2070·6174·6873·0a64·6563·6c61··file·paths.decla | ||
| 0003fa90:· | 0003fa90:·7265·202d·6120·4c4f·475f·4649·4c45·5f50··re·-a·LOG_FILE_P | ||
| 0003faa0:· | 0003faa0:·4154·4853·0a0a·2320·4172·7261·7920·746f··ATHS..#·Array·to | ||
| 0003fab0:·2 | 0003fab0:·2068·6f6c·6420·616c·6c20·7273·7973·6c6f···hold·all·rsyslo | ||
| 0003fac0:·6 | 0003fac0:·6720·636f·6e66·6967·2065·6e74·7269·6573··g·config·entries | ||
| 0003fad0:·0a | 0003fad0:·0a52·5359·534c·4f47·5f43·4f4e·4649·4753··.RSYSLOG_CONFIGS | ||
| 0003fae0:· | 0003fae0:·3d28·290a·5253·5953·4c4f·475f·434f·4e46··=().RSYSLOG_CONF | ||
| 0003faf0:· | 0003faf0:·4947·533d·2822·247b·5253·5953·4c4f·475f··IGS=("${RSYSLOG_ | ||
| 0003fb00:· | 0003fb00:·4554·435f·434f·4e46·4947·7d22·2022·247b··ETC_CONFIG}"·"${ | ||
| 0003fb10:· | 0003fb10:·5253·5953·4c4f·475f·494e·434c·5544·455f··RSYSLOG_INCLUDE_ | ||
| 0003fb20:· | 0003fb20:·434f·4e46·4947·5b40·5d7d·2220·2224·7b52··CONFIG[@]}"·"${R | ||
| 0003fb30:· | 0003fb30:·5359·534c·4f47·5f49·4e43·4c55·4445·5b40··SYSLOG_INCLUDE[@ | ||
| 0003fb40:·5 | 0003fb40:·5d7d·2229·0a0a·2320·4765·7420·6675·6c6c··]}")..#·Get·full | ||
| 0003fb50:·6 | 0003fb50:·206c·6973·7420·6f66·2066·696c·6573·2074···list·of·files·t | ||
| 0003fb60:·6 | 0003fb60:·6f20·6265·2063·6865·636b·6564·0a23·2052··o·be·checked.#·R | ||
| 0003fb70:· | 0003fb70:·5359·534c·4f47·5f43·4f4e·4649·4753·206d··SYSLOG_CONFIGS·m | ||
| 0003fb80:· | 0003fb80:·6179·2063·6f6e·7461·696e·2067·6c6f·6273··ay·contain·globs | ||
| 0003fb90:· | 0003fb90:·2073·7563·6820·6173·0a23·202f·6574·632f···such·as.#·/etc/ | ||
| 0003fba0:· | 0003fba0:·7273·7973·6c6f·672e·642f·2a2e·636f·6e66··rsyslog.d/*.conf | ||
| 0003fbb0:· | 0003fbb0:·202f·6574·632f·7273·7973·6c6f·672e·642f···/etc/rsyslog.d/ | ||
| 0003fbc0:· | 0003fbc0:·2a2e·6672·756c·650a·2320·536f·2c20·6c6f··*.frule.#·So,·lo | ||
| 0003fbd0:· | 0003fbd0:·6f70·206f·7665·7220·7468·6520·656e·7472··op·over·the·entr | ||
| 0003fbe0:·6 | 0003fbe0:·6965·7320·696e·2052·5359·534c·4f47·5f43··ies·in·RSYSLOG_C | ||
| 0003fbf0:·4 | 0003fbf0:·4f4e·4649·4753·2061·6e64·2075·7365·2066··ONFIGS·and·use·f | ||
| 0003fc00:· | 0003fc00:·696e·6420·746f·2067·6574·2074·6865·206c··ind·to·get·the·l | ||
| 0003fc10:· | 0003fc10:·6973·7420·6f66·2069·6e63·6c75·6465·6420··ist·of·included· | ||
| 0003fc20:·6 | 0003fc20:·6669·6c65·732e·0a52·5359·534c·4f47·5f43··files..RSYSLOG_C | ||
| 0003fc30:· | 0003fc30:·4f4e·4649·475f·4649·4c45·533d·2829·0a66··ONFIG_FILES=().f | ||
| 0003fc40:· | 0003fc40:·6f72·2045·4e54·5259·2069·6e20·2224·7b52··or·ENTRY·in·"${R | ||
| 0003fc50:· | 0003fc50:·5359·534c·4f47·5f43·4f4e·4649·4753·5b40··SYSLOG_CONFIGS[@ | ||
| 0003fc60:· | 0003fc60:·5d7d·220a·646f·0a09·2320·4966·2064·6972··]}".do..#·If·dir | ||
| 0003fc70:·663 | 0003fc70:·6563·746f·7279·2c20·7273·7973·6c6f·6720··ectory,·rsyslog· | ||
| 0003fc80:·7 | 0003fc80:·7769·6c6c·2073·6561·7263·6820·666f·7220··will·search·for· | ||
| Max diff block lines reached; 937752/1039098 bytes (90.25%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·12 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·12 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:12 | 42 | ····*·cpe:/o:debian:debian_linux:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 258, 14 lines modified | Offset 258, 139 lines modified | ||
| 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2 |
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 266 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 267 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 268 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 269 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 270 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 271 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 272 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 273 | of·IncludeConfig) | ||
| 274 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 275 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 276 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 277 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 278 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 279 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 280 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 281 | '%s\\n'·"${INCPATH}";·done) | ||
| 282 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 283 | declare·-a·LOG_FILE_PATHS | ||
| 284 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 285 | RSYSLOG_CONFIGS=() | ||
| 286 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 287 | {RSYSLOG_INCLUDE[@]}") | ||
| 288 | #·Get·full·list·of·files·to·be·checked | ||
| 289 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 290 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 291 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 292 | included·files. | ||
| 293 | RSYSLOG_CONFIG_FILES=() | ||
| 294 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 295 | do | ||
| 296 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 297 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 298 | » if·[·-d·"${ENTRY}"·] | ||
| 299 | » then | ||
| 300 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 301 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 302 | » elif·[·-f·"${ENTRY}"·] | ||
| 303 | » then | ||
| 304 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 305 | » else | ||
| 306 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 307 | » fi | ||
| 308 | done | ||
| 309 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 310 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 311 | configuration) | ||
| 312 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 313 | do | ||
| 314 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 315 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 316 | ('$')·characters, | ||
| 317 | » #·*·Ignore·empty·lines, | ||
| 318 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 319 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 320 | not·log·files | ||
| 321 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 322 | path | ||
| 323 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 324 | all·of·the | ||
| 325 | » #·following·are·met: | ||
| 326 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 327 | » #·*·it·is·preceded·by·space | ||
| 328 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 329 | characters | ||
| 330 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 331 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 332 | » then | ||
| 333 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 334 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 335 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 336 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 337 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 338 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 339 | {FILTERED_PATHS}") | ||
| 340 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 341 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 342 | newline),·split | ||
| 343 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 344 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 345 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 346 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 347 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 348 | » » #·Delete·the·temporary·array | ||
| 349 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 350 | » fi | ||
| 351 | done | ||
| 352 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 353 | grep·regex·is·a·bit | ||
| 354 | #·curly: | ||
| 355 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 356 | #·extract·File="logfile"·expression | ||
| 357 | #·match·only·"logfile"·expression | ||
| 358 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 359 | do | ||
| 360 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 361 | "${LOG_FILE}") | ||
| 362 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| Max diff block lines reached; 123475/130045 bytes (94.95%) of diff not shown. | |||
| Offset 3, 5395 lines modified | Offset 3, 5164 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_uvcvideo_disabled_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Disable·the·uvcvideo·module</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_uvcvideo_disabled_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_renameat_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure· | 11 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·renameat</ocil:title> |
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_renameat_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_devkmem_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Disable·/dev/kmem·virtual·device·support</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_devkmem_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_sha512_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>S | 23 | ······<ocil:title>Sign·kernel·modules·with·SHA-512</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_sha512_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_keepalive_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 29 | ······<ocil:title>Set·SSH·Client·Alive·Count·Max</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_keepalive_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_syslog_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 35 | ······<ocil:title>Verify·Group·Who·Owns·/var/log/syslog·File</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_var_log_syslog_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lsetxattr_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 41 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·lsetxattr</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_lsetxattr_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_tmp_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 47 | ······<ocil:title>Ensure·/tmp·Located·On·Separate·Partition</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-partition_for_tmp_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_notifiers_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>En | 53 | ······<ocil:title>Enable·checks·on·notifier·call·chains</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_notifiers_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_gssapi_auth_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Disable·GSSAPI·Authentication</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_gssapi_auth_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-ensure_logrotate_activated_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure· | 65 | ······<ocil:title>Ensure·Logrotate·Runs·Periodically</ocil:title> |
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-ensure_logrotate_activated_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-accounts_logon_fail_delay_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 71 | ······<ocil:title>Ensure·the·Logon·Failure·Delay·is·Set·Correctly·in·login.defs</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-accounts_logon_fail_delay_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-service_systemd-journald_enabled_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Enable·systemd-journald·Service</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-service_systemd-journald_enabled_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pubkey_auth_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 83 | ······<ocil:title>Enable·Public·Key·Authentication</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pubkey_auth_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_dmesg_restrict_ocil:questionnaire:1"> | ||
| 95 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-securetty_root_login_console_only_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Restrict·Virtual·Console·Root·Logins</ocil:title> | ||
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-securetty_root_login_console_only_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_x11_forwarding_ocil:questionnaire:1"> | ||
| 101 | ····· | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_truncate_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·truncate</ocil:title> | ||
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-ss | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_truncate_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_strictmodes_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Enable·Use·of·Strict·Mode·Checking</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_strictmodes_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-s | 106 | ····<ocil:questionnaire·id="ocil:ssg-accounts_max_concurrent_login_sessions_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 107 | ······<ocil:title>Limit·the·Number·of·Concurrent·Login·Sessions·Allowed·Per·User</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-s | 109 | ········<ocil:test_action_ref>ocil:ssg-accounts_max_concurrent_login_sessions_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-p | 112 | ····<ocil:questionnaire·id="ocil:ssg-dir_permissions_binary_dirs_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 113 | ······<ocil:title>Verify·that·System·Executable·Directories·Have·Restrictive·Permissions</ocil:title> |
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-p | 115 | ········<ocil:test_action_ref>ocil:ssg-dir_permissions_binary_dirs_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_passwd_ocil:questionnaire:1"> |
| 125 | ······<ocil:title>Verify· | 119 | ······<ocil:title>Verify·Permissions·on·Backup·passwd·File</ocil:title> |
| 126 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 127 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 703151/715800 bytes (98.23%) of diff not shown. | |||
| Offset 3, 12593 lines modified | Offset 3, 12593 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-package_audit_installed_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure· | 11 | ······<ocil:title>Ensure·the·audit·Subsystem·is·Installed</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-package_audit_installed_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_per | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_system_commands_dirs_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Verify· | 17 | ······<ocil:title>Verify·that·system·commands·files·are·group·owned·by·root·or·a·system·account</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-file_per | 19 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_system_commands_dirs_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-sudo_dedicated_group_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·a·dedicated·group·owns·sudo</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sudo_dedicated_group_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_force_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Require·modules·to·be·validly·signed</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_force_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-package_setroubleshoot-server_removed_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faillock_audit_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Account·Lockouts·Must·Be·Logged</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_faillock_audit_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_arm64_sw_ttbr0_pan_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_efi_grub2_cfg_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Verify·the·UEFI·Boot·Loader·grub.cfg·Permissions</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_efi_grub2_cfg_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_accept_ra_rtr_pref_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_login_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable·SSH·Root·Login</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-s | 49 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_login_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_modify_ldt_syscall_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_tmp_nosuid_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Add·nosuid·Option·to·/var/tmp</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-mount_option_var_tmp_nosuid_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_boot_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·/boot·Located·On·Separate·Partition</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-partition_for_boot_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-aide_build_database_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Build·and·Test·AIDE·Database</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-aide_build_database_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_legacy_vsyscall_none_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Disable·vsyscall·mapping</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_legacy_vsyscall_none_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_ | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Kernel·Module·Loading·and·Unloading</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_ | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_kernel_module_loading_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-p | 82 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·/var·Located·On·Separate·Partition</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-p | 85 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-grub2_systemd_debug-shell_argument_absent_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_passwd_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/passwd</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_passwd_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-package_nss-tools_installed_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Ensure·nss-tools·is·installed</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-package_nss-tools_installed_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_shadow_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Verify· | 101 | ······<ocil:title>Verify·Permissions·on·shadow·File</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-dir_permissions_binary_dirs_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_arp_filter_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Configure·ARP·filtering·for·All·IPv4·Interfaces</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_arp_filter_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_open_by_handle_at_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-service_systemd-journald_enabled_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Enable·systemd-journald·Service</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-service_systemd-journald_enabled_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-package_talk-server_removed_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Uninstall·talk-server·Package</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-package_talk-server_removed_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| Max diff block lines reached; 1186467/1199003 bytes (98.95%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0····165 | 2 | -rw-r--r--···0········0········0····16524·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0·323 | 3 | -rw-r--r--···0········0········0·32338476·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14295, 15 lines modified | Offset 14295, 15 lines modified | ||
| 00037d60:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d60:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037d70:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037d70:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037d80:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037d80:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037d90:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037d90:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037da0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037da0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037db0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037db0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037dc0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037dc0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037dd0:·2032·3032·342d·3131·2d30·3 | 00037dd0:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037de0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037df0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037df0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e00:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e00:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e10:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e10:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e20:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e20:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e30:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e30:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e40:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e40:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15105, 119 lines modified | Offset 15105, 119 lines modified | ||
| 0003b000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b010:·3133·3231·2220·7461·6269·6e64·6578·3d22··1321"·tabindex=" | 0003b010:·3133·3231·2220·7461·6269·6e64·6578·3d22··1321"·tabindex=" | ||
| 0003b020:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b020:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b030:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b030:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b040:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b040:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b050:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b050:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b060:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b060:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b070:·6469·6174·696f·6e20· | 0003b070:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 0003b080:· | 0003b080:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b090:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b0a0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b0b0:·6c61·7073·6522·2069·643d·2269·646d·3133··lapse"·id="idm13 | |||
| 0003b0c0:·3231·223e·3c74·6162·6c65·2063·6c61·7373··21"><table·class | |||
| 0003b0d0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b090:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b0a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b0b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003b0c0:·3332·3122·3e3c·7461·626c·6520·636c·6173··321"><table·clas | |||
| 0003b0d0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b0e0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b0 | 0003b0e0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b0f0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b100:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b110:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b120:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b130:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b100:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b110:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b120:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b130:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b140:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b150:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b160:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b170:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b180:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b190:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b1a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b1b0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b1c0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b1d0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b1e0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b1f0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b200:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b210:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b220:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b230:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b240:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b250:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b260:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b270:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b280:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b290:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b2a0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b2b0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b2c0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b2d0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b2e0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b2f0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b300:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b310:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b320:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b330:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b340:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b350:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b360:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b370:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b380:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b390:·6765·743d·2223·6964·6d31·3332·3222·2074··get="#idm1322"·t | |||
| 0003b3a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b3b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b3c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b3d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b3e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b3f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b400:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b410:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b420:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b430:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b440:·6964·3d22·6964·6d31·3332·3222·3e3c·7461··id="idm1322"><ta | |||
| 0003b450:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b460:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b470:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b480:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b490:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b | 0003b140:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b | 0003b150:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b160:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b170:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b180:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b190:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b1a0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b1b0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b1c0:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b1d0:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b1e0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b1f0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b200:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b210:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b220:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b230:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b240:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b250:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b260:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b270:·2223·6964·6d31·3332·3222·2074·6162·696e··"#idm1322"·tabin | |||
| 0003b280:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b290:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b2a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b2b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b2c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b2d0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003b2e0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| Max diff block lines reached; 6656412/6668196 bytes (99.82%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·2·-·Server | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·2·-·Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:amazon:amazon_linux:2023 | 44 | ····*·cpe:/o:amazon:amazon_linux:2023 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 14 lines modified | Offset 122, 31 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············1.3.1 | 127 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | } | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"aide" | ||
| 143 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 149 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 150 | ··package: |
| Offset 143, 31 lines modified | Offset 160, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 160 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 161 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 162 | ··-·low_complexity |
| 146 | ··-·low_disruption | 163 | ··-·low_disruption |
| 147 | ··-·medium_severity | 164 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | include·install_aide | ||
| 156 | class·install_aide·{ | ||
| 157 | ··package·{·'aide': | ||
| 158 | ····ensure·=>·'installed', | ||
| 159 | ··} | ||
| 160 | } | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 167 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 166 | Run·the·following·command·to·generate·a·new·database: | 168 | Run·the·following·command·to·generate·a·new·database: |
| 167 | $·sudo·/usr/sbin/aide·--init | 169 | $·sudo·/usr/sbin/aide·--init |
| 168 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, | 170 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, |
| 169 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a | 171 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a |
| 170 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The | 172 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The |
| 171 | newly-generated·database·can·be·installed·as·follows: | 173 | newly-generated·database·can·be·installed·as·follows: |
| Offset 482, 14 lines modified | Offset 482, 33 lines modified | ||
| 482 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 482 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 483 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 483 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 484 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 484 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 485 | ·····················FCS_TLSC_EXT.1 | 485 | ·····················FCS_TLSC_EXT.1 |
| 486 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 486 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 487 | ············_\x8c_\x8i_\x8s······1.9 | 487 | ············_\x8c_\x8i_\x8s······1.9 |
| 488 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 488 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 489 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 490 | var_system_crypto_policy='DEFAULT' | ||
| 491 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 492 | rc=$? | ||
| 493 | if·test·"$rc"·=·127;·then | ||
| 494 | » echo·"$stderr_of_call"·>&2 | ||
| 495 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 496 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 497 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 498 | » false··#·end·with·an·error·code | ||
| 499 | elif·test·"$rc"·!=·0;·then | ||
| 500 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 501 | » false··#·end·with·an·error·code | ||
| 502 | fi | ||
| 489 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 503 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 490 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 504 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 491 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 505 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 492 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 506 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 493 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 507 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 494 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 508 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 495 | ··set_fact: | 509 | ··set_fact: |
| Offset 532, 33 lines modified | Offset 551, 14 lines modified | ||
| 532 | ··-·PCI-DSSv4-2.2.7 | 551 | ··-·PCI-DSSv4-2.2.7 |
| 533 | ··-·configure_crypto_policy | 552 | ··-·configure_crypto_policy |
| 534 | ··-·high_severity | 553 | ··-·high_severity |
| 535 | ··-·low_complexity | 554 | ··-·low_complexity |
| 536 | ··-·low_disruption | 555 | ··-·low_disruption |
| 537 | ··-·no_reboot_needed | 556 | ··-·no_reboot_needed |
| 538 | ··-·restrict_strategy | 557 | ··-·restrict_strategy |
| 539 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 540 | var_system_crypto_policy='DEFAULT' | ||
| 541 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| Max diff block lines reached; 729709/735942 bytes (99.15%) of diff not shown. | |||
| Offset 14296, 15 lines modified | Offset 14296, 15 lines modified | ||
| 00037d70:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037d70:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d80:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d80:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d90:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d90:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037da0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037da0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037db0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037db0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037dc0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037dc0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037dd0:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037dd0:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037de0:·3131·2d30·3 | 00037de0:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037df0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037df0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e00:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e00:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e10:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e10:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e20:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e20:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037e30:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037e30:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037e40:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037e40:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037e50:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037e50:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15078, 118 lines modified | Offset 15078, 118 lines modified | ||
| 0003ae50:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 0003ae50:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 0003ae60:·3332·3122·2074·6162·696e·6465·783d·2230··321"·tabindex="0 | 0003ae60:·3332·3122·2074·6162·696e·6465·783d·2230··321"·tabindex="0 | ||
| 0003ae70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003ae70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003ae80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003ae80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003ae90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003ae90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003aea0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003aea0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003aeb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003aeb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003aec0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003aed0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003aee0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003aef0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003af00:·6170·7365·2220·6964·3d22·6964·6d31·3332··apse"·id="idm132 | |||
| 0003af10:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003af20:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003aec0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003aed0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003aee0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003aef0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003af00:·6c61·7073·6522·2069·643d·2269·646d·3133··lapse"·id="idm13 | |||
| 0003af10:·3231·223e·3c74·6162·6c65·2063·6c61·7373··21"><table·class | |||
| 0003af20:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003af30:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003af | 0003af30:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003af40:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003af50:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003af60:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003af70:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003af80:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003af50:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003af60:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003af70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003af80:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003af90:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003afa0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003afb0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003afc0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003afd0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003afe0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003aff0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b000:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b010:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b020:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b030:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b040:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b050:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b060:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b070:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b080:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b090:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b0a0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b0b0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b0c0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b0d0:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b0e0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b0f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b100:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b110:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b120:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b130:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b140:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b150:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b160:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b170:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b180:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b190:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b1a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b1b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b1c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b1d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b1e0:·6574·3d22·2369·646d·3133·3232·2220·7461··et="#idm1322"·ta | |||
| 0003b1f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b200:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b210:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b220:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b230:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b240:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b250:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b260:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b270:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b280:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b290:·643d·2269·646d·3133·3232·223e·3c74·6162··d="idm1322"><tab | |||
| 0003b2a0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b2b0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b2c0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b2d0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b2e0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003 | 0003af90:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003 | 0003afa0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003 | 0003afb0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003afc0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003afd0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003afe0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003aff0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b000:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b010:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b020:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b030:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b040:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b050:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b060:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b070:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b080:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b090:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b0a0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b0b0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b0c0:·2369·646d·3133·3232·2220·7461·6269·6e64··#idm1322"·tabind | |||
| 0003b0d0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b0e0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b0f0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b100:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b110:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| Max diff block lines reached; 5550587/5566649 bytes (99.71%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·1·-·Server | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·1·-·Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:amazon:amazon_linux:2023 | 44 | ····*·cpe:/o:amazon:amazon_linux:2023 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 118, 14 lines modified | Offset 118, 31 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············1.3.1 | 123 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | [[packages]] | ||
| 138 | name·=·"aide" | ||
| 139 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 145 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 146 | ··package: |
| Offset 139, 31 lines modified | Offset 156, 14 lines modified | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | 156 | ··-·PCI-DSSv4-11.5.2 |
| 140 | ··-·enable_strategy | 157 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 158 | ··-·low_complexity |
| 142 | ··-·low_disruption | 159 | ··-·low_disruption |
| 143 | ··-·medium_severity | 160 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 161 | ··-·no_reboot_needed |
| 145 | ··-·package_aide_installed | 162 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | include·install_aide | ||
| 152 | class·install_aide·{ | ||
| 153 | ··package·{·'aide': | ||
| 154 | ····ensure·=>·'installed', | ||
| 155 | ··} | ||
| 156 | } | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 163 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | Run·the·following·command·to·generate·a·new·database: | 164 | Run·the·following·command·to·generate·a·new·database: |
| 163 | $·sudo·/usr/sbin/aide·--init | 165 | $·sudo·/usr/sbin/aide·--init |
| 164 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, | 166 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, |
| 165 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a | 167 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a |
| 166 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The | 168 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The |
| 167 | newly-generated·database·can·be·installed·as·follows: | 169 | newly-generated·database·can·be·installed·as·follows: |
| Offset 478, 14 lines modified | Offset 478, 33 lines modified | ||
| 478 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 478 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 479 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 479 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 480 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 480 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 481 | ·····················FCS_TLSC_EXT.1 | 481 | ·····················FCS_TLSC_EXT.1 |
| 482 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 482 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 483 | ············_\x8c_\x8i_\x8s······1.9 | 483 | ············_\x8c_\x8i_\x8s······1.9 |
| 484 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 484 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 486 | var_system_crypto_policy='DEFAULT' | ||
| 487 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 488 | rc=$? | ||
| 489 | if·test·"$rc"·=·127;·then | ||
| 490 | » echo·"$stderr_of_call"·>&2 | ||
| 491 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 492 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 493 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 494 | » false··#·end·with·an·error·code | ||
| 495 | elif·test·"$rc"·!=·0;·then | ||
| 496 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 497 | » false··#·end·with·an·error·code | ||
| 498 | fi | ||
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 499 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 486 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 500 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 487 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 501 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 488 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 502 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 489 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 503 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 490 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 504 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 491 | ··set_fact: | 505 | ··set_fact: |
| Offset 528, 33 lines modified | Offset 547, 14 lines modified | ||
| 528 | ··-·PCI-DSSv4-2.2.7 | 547 | ··-·PCI-DSSv4-2.2.7 |
| 529 | ··-·configure_crypto_policy | 548 | ··-·configure_crypto_policy |
| 530 | ··-·high_severity | 549 | ··-·high_severity |
| 531 | ··-·low_complexity | 550 | ··-·low_complexity |
| 532 | ··-·low_disruption | 551 | ··-·low_disruption |
| 533 | ··-·no_reboot_needed | 552 | ··-·no_reboot_needed |
| 534 | ··-·restrict_strategy | 553 | ··-·restrict_strategy |
| 535 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 536 | var_system_crypto_policy='DEFAULT' | ||
| 537 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| Max diff block lines reached; 602136/608379 bytes (98.97%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037dc0:·6620·3230·3234·2d31·312d·303 | 00037dc0:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15468, 118 lines modified | Offset 15468, 118 lines modified | ||
| 0003c6b0:·7267·6574·3d22·2369·646d·3131·3836·2220··rget="#idm1186"· | 0003c6b0:·7267·6574·3d22·2369·646d·3131·3836·2220··rget="#idm1186"· | ||
| 0003c6c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003c6c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003c6d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003c6d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003c6e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003c6e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003c6f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003c6f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003c700:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003c700:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003c710:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003c710:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003c720:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003c730:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c740:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c750:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c760:·2069·643d·2269·646d·3131·3836·223e·3c74···id="idm1186"><t | |||
| 0003c770:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c780:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c720:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003c730:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c740:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c750:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c760:·2220·6964·3d22·6964·6d31·3138·3622·3e3c··"·id="idm1186">< | |||
| 0003c770:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c780:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c790:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c7 | 0003c790:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003c7a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c7b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003c7c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003c7d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c7e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003c7f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c800:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c810:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003c820:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c830:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c840:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003c850:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003c860:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003c870:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003c880:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003c890:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003c8a0:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003c8b0:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003c8c0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003c7b0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c7c0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c7d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c7e0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c7f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c800:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c810:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003c820:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c830:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003c840:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003c850:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c860:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003c870:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003c880:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003c890:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003c8a0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003c8b0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003c8c0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003c8d0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003c8e0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003c8f0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003c900:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003c910:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003c920:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003c930:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003c940:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003c950:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003c960:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003c970:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003c980:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003c990:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003c9a0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003c9b0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003c9c0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003c9d0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003c9e0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003c | 0003c8d0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 0003c | 0003c8e0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | ||
| 0003c | 0003c8f0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 0003c | 0003c900:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003c | 0003c910:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 0003c | 0003c920:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | ||
| 0003c | 0003c930:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003c | 0003c940:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003c | 0003c950:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003c | 0003c960:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003c | 0003c970:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003caa0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003cab0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003cac0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003cad0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003cae0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003caf0:·6d31·3138·3722·3e3c·7461·626c·6520·636c··m1187"><table·cl | |||
| 0003cb00:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003cb10:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003cb20:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003cb30:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003c | 0003c980:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003c990:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003c9a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c9b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c9c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c9d0:·2069·643d·2269·646d·3131·3837·223e·3c70···id="idm1187"><p | |||
| 0003c9e0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003c9f0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003ca00:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003ca10:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003ca20:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003ca30:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| Max diff block lines reached; 2447819/2463881 bytes (99.35%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·2 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·2 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 160, 14 lines modified | Offset 160, 31 lines modified | ||
| 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | include·install_aide | ||
| 173 | class·install_aide·{ | ||
| 174 | ··package·{·'aide': | ||
| 175 | ····ensure·=>·'installed', | ||
| 176 | ··} | ||
| 177 | } | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | [[packages]] | ||
| 180 | name·=·"aide" | ||
| 181 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | -·name:·Ensure·aide·is·installed | 187 | -·name:·Ensure·aide·is·installed |
| 173 | ··package: | 188 | ··package: |
| Offset 181, 31 lines modified | Offset 198, 14 lines modified | ||
| 181 | ··-·PCI-DSSv4-11.5.2 | 198 | ··-·PCI-DSSv4-11.5.2 |
| 182 | ··-·enable_strategy | 199 | ··-·enable_strategy |
| 183 | ··-·low_complexity | 200 | ··-·low_complexity |
| 184 | ··-·low_disruption | 201 | ··-·low_disruption |
| 185 | ··-·medium_severity | 202 | ··-·medium_severity |
| 186 | ··-·no_reboot_needed | 203 | ··-·no_reboot_needed |
| 187 | ··-·package_aide_installed | 204 | ··-·package_aide_installed |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | include·install_aide | ||
| 194 | class·install_aide·{ | ||
| 195 | ··package·{·'aide': | ||
| 196 | ····ensure·=>·'installed', | ||
| 197 | ··} | ||
| 198 | } | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 200 | [[packages]] | ||
| 201 | name·=·"aide" | ||
| 202 | version·=·"*" | ||
| 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 204 | Run·the·following·command·to·generate·a·new·database: | 206 | Run·the·following·command·to·generate·a·new·database: |
| 205 | $·sudo·/usr/sbin/aide·--init | 207 | $·sudo·/usr/sbin/aide·--init |
| 206 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 207 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 209 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 208 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 210 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 209 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 211 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 506, 14 lines modified | Offset 506, 33 lines modified | ||
| 506 | ············_\x8i_\x8s_\x8m······1446 | 506 | ············_\x8i_\x8s_\x8m······1446 |
| 507 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 507 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 508 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 508 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 509 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 509 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 510 | ·····················FCS_TLSC_EXT.1 | 510 | ·····················FCS_TLSC_EXT.1 |
| 511 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 511 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 512 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 512 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 513 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 514 | var_system_crypto_policy='DEFAULT' | ||
| 515 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 516 | rc=$? | ||
| 517 | if·test·"$rc"·=·127;·then | ||
| 518 | » echo·"$stderr_of_call"·>&2 | ||
| 519 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 520 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 521 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 522 | » false··#·end·with·an·error·code | ||
| 523 | elif·test·"$rc"·!=·0;·then | ||
| 524 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 525 | » false··#·end·with·an·error·code | ||
| 526 | fi | ||
| 513 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 527 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 514 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 528 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 515 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 529 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 516 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 530 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 517 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 531 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 518 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 532 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 519 | ··set_fact: | 533 | ··set_fact: |
| Offset 556, 33 lines modified | Offset 575, 14 lines modified | ||
| 556 | ··-·PCI-DSSv4-2.2.7 | 575 | ··-·PCI-DSSv4-2.2.7 |
| 557 | ··-·configure_crypto_policy | 576 | ··-·configure_crypto_policy |
| 558 | ··-·high_severity | 577 | ··-·high_severity |
| 559 | ··-·low_complexity | 578 | ··-·low_complexity |
| 560 | ··-·low_disruption | 579 | ··-·low_disruption |
| 561 | ··-·no_reboot_needed | 580 | ··-·no_reboot_needed |
| 562 | ··-·restrict_strategy | 581 | ··-·restrict_strategy |
| 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 564 | var_system_crypto_policy='DEFAULT' | ||
| 565 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| Max diff block lines reached; 299095/305396 bytes (97.94%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d80:·206f·6620·3230·3234·2d31·312d·303 | 00037d80:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16651, 173 lines modified | Offset 16651, 173 lines modified | ||
| 000410a0:·6172·6765·743d·2223·6964·6d31·3435·3522··arget="#idm1455" | 000410a0:·6172·6765·743d·2223·6964·6d31·3435·3522··arget="#idm1455" | ||
| 000410b0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 000410b0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 000410c0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 000410c0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 000410d0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 000410d0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 000410e0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 000410e0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 000410f0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 000410f0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 00041100:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 00041100:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 00041110:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 00041120:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00041130:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00041140:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00041150:·6964·3d22·6964·6d31·3435·3522·3e3c·7072··id="idm1455"><pr | |||
| 00041160:·653e·3c63·6f64·653e·0a76·6172·5f73·7973··e><code>.var_sys | |||
| 00041110:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00041120:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00041130:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00041140:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00041150:·6522·2069·643d·2269·646d·3134·3535·223e··e"·id="idm1455"> | |||
| 00041160:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00041170:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00041180:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00041190:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 000411a0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000411b0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 000411c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000411d0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 000411e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 000411f0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00041200:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00041210:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00041220:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00041230:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 00041240:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00041250:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00041260:·3a20·5843·4344·4620·5661·6c75·6520·7661··:·XCCDF·Value·va | |||
| 00041270:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 00041280:·706f·6c69·6379·2023·2070·726f·6d6f·7465··policy·#·promote | |||
| 00041290:·2074·6f20·7661·7269·6162·6c65·0a20·2073···to·variable.··s | |||
| 000412a0:·6574·5f66·6163·743a·0a20·2020·2076·6172··et_fact:.····var | |||
| 00041 | 00041170:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 00041180:·793d·273c·6162·6272·2074·6974·6c65·3d22··y='<abbr·title=" | |||
| 00041190:·6672·6f6d·2042·656e·6368·6d61·726b·2f56··from·Benchmark/V | |||
| 000411a0:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | |||
| 000411b0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | |||
| 000411c0:·6e74·5f76·616c·7565·5f76·6172·5f73·7973··nt_value_var_sys | |||
| 000411d0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 000411e0:·7922·3e44·4546·4155·4c54·3c2f·6162·6272··y">DEFAULT</abbr | |||
| 000411f0:·3e27·0a0a·0a73·7464·6572·725f·6f66·5f63··>'...stderr_of_c | |||
| 00041200:·616c·6c3d·2428·7570·6461·7465·2d63·7279··all=$(update-cry | |||
| 00041210:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 000412c0:·6f6c·6963·793a·2021·2173·7472·203c·6162··olicy:·!!str·<ab | |||
| 000412d0:·6272·2074·6974·6c65·3d22·6672·6f6d·2042··br·title="from·B | |||
| 000412e0:·656e·6368·6d61·726b·2f56·616c·7565·3a20··enchmark/Value:· | |||
| 000412f0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | |||
| 00041300:·6a65·6374·2e63·6f6e·7465·6e74·5f76·616c··ject.content_val | |||
| 00041310:·7565·5f76·6172·5f73·7973·7465·6d5f·6372··ue_var_system_cr | |||
| 00041320:·7970·746f·5f70·6f6c·6963·7922·3e44·4546··ypto_policy">DEF | |||
| 00041330:·4155·4c54·3c2f·6162·6272·3e0a·2020·7461··AULT</abbr>.··ta | |||
| 00041340:·6773·3a0a·2020·2020·2d20·616c·7761·7973··gs:.····-·always | |||
| 00041350:·0a0a·2d20·6e61·6d65·3a20·436f·6e66·6967··..-·name:·Config | |||
| 00041360:·7572·6520·5379·7374·656d·2043·7279·7074··ure·System·Crypt | |||
| 00041370:·6f67·7261·7068·7920·506f·6c69·6379·0a20··ography·Policy.· | |||
| 00041380:·206c·696e·6569·6e66·696c·653a·0a20·2020···lineinfile:.··· | |||
| 00041390:·2070·6174·683a·202f·6574·632f·6372·7970···path:·/etc/cryp | |||
| 000413a0:·746f·2d70·6f6c·6963·6965·732f·636f·6e66··to-policies/conf | |||
| 000413b0:·6967·0a20·2020·2072·6567·6578·703a·205e··ig.····regexp:·^ | |||
| 000413c0:·283f·2123·2928·5c53·2b29·240a·2020·2020··(?!#)(\S+)$.···· | |||
| 000413d0:·6c69·6e65·3a20·277b·7b20·7661·725f·7379··line:·'{{·var_sy | |||
| 000413e0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 000413f0:·6379·207d·7d27·0a20·2020·2063·7265·6174··cy·}}'.····creat | |||
| 00041400:·653a·2074·7275·650a·2020·7461·6773·3a0a··e:·true.··tags:. | |||
| 00041410:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 00041420:·4143·2d31·3728·3229·0a20·202d·204e·4953··AC-17(2).··-·NIS | |||
| 00041430:·542d·3830·302d·3533·2d41·432d·3137·2861··T-800-53-AC-17(a | |||
| 00041440:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 00041450:·332d·434d·2d36·2861·290a·2020·2d20·4e49··3-CM-6(a).··-·NI | |||
| 00041460:·5354·2d38·3030·2d35·332d·4d41·2d34·2836··ST-800-53-MA-4(6 | |||
| 00041470:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 00041480:·332d·5343·2d31·3228·3229·0a20·202d·204e··3-SC-12(2).··-·N | |||
| 00041490:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 000414a0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | |||
| 000414b0:·2d35·332d·5343·2d31·330a·2020·2d20·5043··-53-SC-13.··-·PC | |||
| 000414c0:·492d·4453·5376·342d·322e·322e·370a·2020··I-DSSv4-2.2.7.·· | |||
| 000414d0:·2d20·636f·6e66·6967·7572·655f·6372·7970··-·configure_cryp | |||
| 000414e0:·746f·5f70·6f6c·6963·790a·2020·2d20·6869··to_policy.··-·hi | |||
| 000414f0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | |||
| 00041500:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 00041510:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 00041520:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | |||
| 00041530:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | |||
| 00041540:·6963·745f·7374·7261·7465·6779·0a0a·2d20··ict_strategy..-· | |||
| 00041550:·6e61·6d65·3a20·5665·7269·6679·2074·6861··name:·Verify·tha | |||
| 00041560:·7420·4372·7970·746f·2050·6f6c·6963·7920··t·Crypto·Policy· | |||
| 00041570:·6973·2053·6574·2028·7275·6e74·696d·6529··is·Set·(runtime) | |||
| 00041580:·0a20·2063·6f6d·6d61·6e64·3a20·2f75·7372··.··command:·/usr | |||
| 00041590:·2f62·696e·2f75·7064·6174·652d·6372·7970··/bin/update-cryp | |||
| 000415a0:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 00041 | 00041220:·6574·2024·7b76·6172·5f73·7973·7465·6d5f··et·${var_system_ | ||
| 00041 | 00041230:·6372·7970·746f·5f70·6f6c·6963·797d·2032··crypto_policy}·2 | ||
| 00041240:·2667·743b·2661·6d70·3b31·2026·6774·3b20··>&1·>· | |||
| 00041250:·2f64·6576·2f6e·756c·6c29·0a72·633d·243f··/dev/null).rc=$? | |||
| 00041260:·0a0a·6966·2074·6573·7420·2224·7263·2220··..if·test·"$rc"· | |||
| 00041270:·3d20·3132·373b·2074·6865·6e0a·0965·6368··=·127;·then..ech | |||
| 00041280:·6f20·2224·7374·6465·7272·5f6f·665f·6361··o·"$stderr_of_ca | |||
| 000415d0:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 000415e0:·542d·3830·302d·3533·2d41·432d·3137·2832··T-800-53-AC-17(2 | |||
| 000415f0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 00041600:·332d·4143·2d31·3728·6129·0a20·202d·204e··3-AC-17(a).··-·N | |||
| 00041610:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 00041620:·6129·0a20·202d·204e·4953·542d·3830·302d··a).··-·NIST-800- | |||
| 00041630:·3533·2d4d·412d·3428·3629·0a20·202d·204e··53-MA-4(6).··-·N | |||
| Max diff block lines reached; 345774/369426 bytes (93.60%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·2 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·2 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 50 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 51 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 53 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 389, 14 lines modified | Offset 389, 34 lines modified | ||
| 389 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 389 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 390 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 390 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 391 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, | 391 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, |
| 392 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 | 392 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 393 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- | 393 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- |
| 394 | ·····················GPOS-00174 | 394 | ·····················GPOS-00174 |
| 395 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 395 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 396 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 397 | var_system_crypto_policy='DEFAULT' | ||
| 398 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 399 | null) | ||
| 400 | rc=$? | ||
| 401 | if·test·"$rc"·=·127;·then | ||
| 402 | » echo·"$stderr_of_call"·>&2 | ||
| 403 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 404 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 405 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 406 | » false··#·end·with·an·error·code | ||
| 407 | elif·test·"$rc"·!=·0;·then | ||
| 408 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 409 | » false··#·end·with·an·error·code | ||
| 410 | fi | ||
| 396 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 411 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 397 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 412 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 398 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 413 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 399 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 414 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 400 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 415 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 401 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 416 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 402 | ··set_fact: | 417 | ··set_fact: |
| Offset 439, 34 lines modified | Offset 459, 14 lines modified | ||
| 439 | ··-·PCI-DSSv4-2.2.7 | 459 | ··-·PCI-DSSv4-2.2.7 |
| 440 | ··-·configure_crypto_policy | 460 | ··-·configure_crypto_policy |
| 441 | ··-·high_severity | 461 | ··-·high_severity |
| 442 | ··-·low_complexity | 462 | ··-·low_complexity |
| 443 | ··-·low_disruption | 463 | ··-·low_disruption |
| 444 | ··-·no_reboot_needed | 464 | ··-·no_reboot_needed |
| 445 | ··-·restrict_strategy | 465 | ··-·restrict_strategy |
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 447 | var_system_crypto_policy='DEFAULT' | ||
| 448 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 449 | null) | ||
| 450 | rc=$? | ||
| 451 | if·test·"$rc"·=·127;·then | ||
| 452 | » echo·"$stderr_of_call"·>&2 | ||
| 453 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 454 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 455 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 456 | » false··#·end·with·an·error·code | ||
| 457 | elif·test·"$rc"·!=·0;·then | ||
| 458 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 459 | » false··#·end·with·an·error·code | ||
| 460 | fi | ||
| 461 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 466 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 462 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many | 467 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many |
| 463 | packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up | 468 | packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up |
| 464 | to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured | 469 | to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured |
| 465 | correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies | 470 | correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies |
| 466 | targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is | 471 | targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is |
| 467 | configured·to·use·the·system-wide·crypto·policy·settings. | 472 | configured·to·use·the·system-wide·crypto·policy·settings. |
| Offset 474, 14 lines modified | Offset 474, 22 lines modified | ||
| 474 | ············expectations,·and·makes·system·configuration·more·fragmented. | 474 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| 475 | Severity: ··high | 475 | Severity: ··high |
| 476 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy | 476 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy |
| 477 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 | 477 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 |
| 478 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 478 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 479 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) | 479 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) |
| 480 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000120-GPOS-00061 | 480 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000120-GPOS-00061 |
| 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 486 | rm·-f·/etc/krb5.conf.d/crypto-policies | ||
| 487 | ln·-s·/etc/crypto-policies/back-ends/krb5.config·/etc/krb5.conf.d/crypto-policies | ||
| 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 488 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 489 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 490 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 491 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 492 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 486 | -·name:·Configure·Kerberos·to·use·System·Crypto·Policy | 493 | -·name:·Configure·Kerberos·to·use·System·Crypto·Policy |
| 487 | ··file: | 494 | ··file: |
| Offset 494, 22 lines modified | Offset 502, 14 lines modified | ||
| 494 | ··-·NIST-800-53-SC-13 | 502 | ··-·NIST-800-53-SC-13 |
| 495 | ··-·configure_kerberos_crypto_policy | 503 | ··-·configure_kerberos_crypto_policy |
| 496 | ··-·configure_strategy | 504 | ··-·configure_strategy |
| 497 | ··-·high_severity | 505 | ··-·high_severity |
| 498 | ··-·low_complexity | 506 | ··-·low_complexity |
| 499 | ··-·low_disruption | 507 | ··-·low_disruption |
| 500 | ··-·reboot_required | 508 | ··-·reboot_required |
| 501 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 502 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 503 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 504 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 505 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 506 | rm·-f·/etc/krb5.conf.d/crypto-policies | ||
| 507 | ln·-s·/etc/crypto-policies/back-ends/krb5.config·/etc/krb5.conf.d/crypto-policies | ||
| 508 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·L\x8Li\x8ib\x8br\x8re\x8es\x8sw\x8wa\x8an\x8n·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 509 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·L\x8Li\x8ib\x8br\x8re\x8es\x8sw\x8wa\x8an\x8n·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 509 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many | 510 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many |
| 510 | packages.·Libreswan·is·supported·by·system·crypto·policy,·but·the·Libreswan | 511 | packages.·Libreswan·is·supported·by·system·crypto·policy,·but·the·Libreswan |
| Max diff block lines reached; 32466/38713 bytes (83.86%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037dc0:·6620·3230·3234·2d31·312d·303 | 00037dc0:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15826, 119 lines modified | Offset 15826, 119 lines modified | ||
| 0003dd10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003dd10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003dd20:·6964·6d31·3237·3822·2074·6162·696e·6465··idm1278"·tabinde | 0003dd20:·6964·6d31·3237·3822·2074·6162·696e·6465··idm1278"·tabinde | ||
| 0003dd30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003dd30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003dd40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003dd40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003dd50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003dd50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003dd60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003dd60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003dd70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003dd70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003dd80:·656d·6564·6961·7469·6f6e·20 | 0003dd80:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003dd90:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003dda0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ddb0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ddc0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ddd0:·6d31·3237·3822·3e3c·7461·626c·6520·636c··m1278"><table·cl | |||
| 0003dde0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003dd90:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003dda0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ddb0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ddc0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ddd0:·646d·3132·3738·223e·3c74·6162·6c65·2063··dm1278"><table·c | |||
| 0003dde0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ddf0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003d | 0003ddf0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003de00:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003de10:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003de20:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003de30:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003de40:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003de10:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003de20:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003de30:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003de40:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003de50:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003de60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003de70:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003de80:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003de90:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003dea0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003deb0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003dec0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ded0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003dee0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003def0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003df00:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003df10:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003df20:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003df30:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003df40:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003df50:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003df60:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003df70:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003df80:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003df90:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003dfa0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003dfb0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003dfc0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003dfd0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003dfe0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003dff0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003e000:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003e010:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003e020:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003e030:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003e040:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003e050:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003e060:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003e070:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003e080:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003e090:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003e0a0:·7461·7267·6574·3d22·2369·646d·3132·3739··target="#idm1279 | |||
| 0003e0b0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003e0c0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003e0d0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003e0e0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003e0f0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003e100:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003e110:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003e120:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003e130:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003e140:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003e150:·6522·2069·643d·2269·646d·3132·3739·223e··e"·id="idm1279"> | |||
| 0003e160:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003e170:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003e180:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003e190:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003e1a0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003 | 0003de50:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003de60:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003de70:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003de80:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003de90:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003dea0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003deb0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003dec0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003ded0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003dee0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003def0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003df00:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003df10:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003df20:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003df30:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003df40:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003df50:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003df60:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003df70:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003df80:·6574·3d22·2369·646d·3132·3739·2220·7461··et="#idm1279"·ta | |||
| 0003df90:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003dfa0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003dfb0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003dfc0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003dfd0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003dfe0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| Max diff block lines reached; 2376590/2392790 bytes (99.32%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·3 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·3 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 202, 14 lines modified | Offset 202, 31 lines modified | ||
| 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 214 | include·install_aide | ||
| 215 | class·install_aide·{ | ||
| 216 | ··package·{·'aide': | ||
| 217 | ····ensure·=>·'installed', | ||
| 218 | ··} | ||
| 219 | } | ||
| 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 221 | [[packages]] | ||
| 222 | name·=·"aide" | ||
| 223 | version·=·"*" | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | -·name:·Ensure·aide·is·installed | 229 | -·name:·Ensure·aide·is·installed |
| 215 | ··package: | 230 | ··package: |
| Offset 223, 31 lines modified | Offset 240, 14 lines modified | ||
| 223 | ··-·PCI-DSSv4-11.5.2 | 240 | ··-·PCI-DSSv4-11.5.2 |
| 224 | ··-·enable_strategy | 241 | ··-·enable_strategy |
| 225 | ··-·low_complexity | 242 | ··-·low_complexity |
| 226 | ··-·low_disruption | 243 | ··-·low_disruption |
| 227 | ··-·medium_severity | 244 | ··-·medium_severity |
| 228 | ··-·no_reboot_needed | 245 | ··-·no_reboot_needed |
| 229 | ··-·package_aide_installed | 246 | ··-·package_aide_installed |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 235 | include·install_aide | ||
| 236 | class·install_aide·{ | ||
| 237 | ··package·{·'aide': | ||
| 238 | ····ensure·=>·'installed', | ||
| 239 | ··} | ||
| 240 | } | ||
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 242 | [[packages]] | ||
| 243 | name·=·"aide" | ||
| 244 | version·=·"*" | ||
| 245 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 247 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 246 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 248 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 247 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 249 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 248 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 250 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 249 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 251 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 250 | crontab: | 252 | crontab: |
| 251 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 253 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 441, 14 lines modified | Offset 441, 33 lines modified | ||
| 441 | ············_\x8i_\x8s_\x8m······1446 | 441 | ············_\x8i_\x8s_\x8m······1446 |
| 442 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 442 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 443 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 443 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 444 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 444 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 445 | ·····················FCS_TLSC_EXT.1 | 445 | ·····················FCS_TLSC_EXT.1 |
| 446 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 446 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 447 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 447 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 449 | var_system_crypto_policy='DEFAULT' | ||
| 450 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 451 | rc=$? | ||
| 452 | if·test·"$rc"·=·127;·then | ||
| 453 | » echo·"$stderr_of_call"·>&2 | ||
| 454 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 455 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 456 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 457 | » false··#·end·with·an·error·code | ||
| 458 | elif·test·"$rc"·!=·0;·then | ||
| 459 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 460 | » false··#·end·with·an·error·code | ||
| 461 | fi | ||
| 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 449 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 450 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 451 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 452 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 453 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 467 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 454 | ··set_fact: | 468 | ··set_fact: |
| Offset 491, 33 lines modified | Offset 510, 14 lines modified | ||
| 491 | ··-·PCI-DSSv4-2.2.7 | 510 | ··-·PCI-DSSv4-2.2.7 |
| 492 | ··-·configure_crypto_policy | 511 | ··-·configure_crypto_policy |
| 493 | ··-·high_severity | 512 | ··-·high_severity |
| 494 | ··-·low_complexity | 513 | ··-·low_complexity |
| 495 | ··-·low_disruption | 514 | ··-·low_disruption |
| 496 | ··-·no_reboot_needed | 515 | ··-·no_reboot_needed |
| 497 | ··-·restrict_strategy | 516 | ··-·restrict_strategy |
| 498 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 499 | var_system_crypto_policy='DEFAULT' | ||
| 500 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| Max diff block lines reached; 283616/289839 bytes (97.85%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d80:·206f·6620·3230·3234·2d31·312d·303 | 00037d80:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16133, 173 lines modified | Offset 16133, 173 lines modified | ||
| 0003f040:·6172·6765·743d·2223·6964·6d31·3436·3322··arget="#idm1463" | 0003f040:·6172·6765·743d·2223·6964·6d31·3436·3322··arget="#idm1463" | ||
| 0003f050:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003f050:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003f060:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003f060:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003f070:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003f070:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003f080:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003f080:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003f090:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003f090:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003f0a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003f0a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003f0b0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003f0c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003f0d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003f0e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003f0f0:·6522·2069·643d·2269·646d·3134·3633·223e··e"·id="idm1463"> | |||
| 0003f100:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003f110:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003f120:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003f130:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003f140:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003f150:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003f160:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003f | 0003f0b0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | ||
| 0003f0c0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003f0d0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003f0e0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003f0f0:·6964·3d22·6964·6d31·3436·3322·3e3c·7072··id="idm1463"><pr | |||
| 0003f100:·653e·3c63·6f64·653e·0a76·6172·5f73·7973··e><code>.var_sys | |||
| 0003f110:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 0003f120:·793d·273c·6162·6272·2074·6974·6c65·3d22··y='<abbr·title=" | |||
| 0003f130:·6672·6f6d·2042·656e·6368·6d61·726b·2f56··from·Benchmark/V | |||
| 0003f140:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | |||
| 0003f150:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | |||
| 0003f160:·6e74·5f76·616c·7565·5f76·6172·5f73·7973··nt_value_var_sys | |||
| 0003f170:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 0003f180:·7922·3e44·4546·4155·4c54·3c2f·6162·6272··y">DEFAULT</abbr | |||
| 0003f190:·3e27·0a0a·0a73·7464·6572·725f·6f66·5f63··>'...stderr_of_c | |||
| 0003f1a0:·616c·6c3d·2428·7570·6461·7465·2d63·7279··all=$(update-cry | |||
| 0003f1b0:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 0003f1c0:·6574·2024·7b76·6172·5f73·7973·7465·6d5f··et·${var_system_ | |||
| 0003f1d0:·6372·7970·746f·5f70·6f6c·6963·797d·2032··crypto_policy}·2 | |||
| 0003f1e0:·2667·743b·2661·6d70·3b31·2026·6774·3b20··>&1·>· | |||
| 0003f1f0:·2f64·6576·2f6e·756c·6c29·0a72·633d·243f··/dev/null).rc=$? | |||
| 0003f200:·0a0a·6966·2074·6573·7420·2224·7263·2220··..if·test·"$rc"· | |||
| 0003f210:·3d20·3132·373b·2074·6865·6e0a·0965·6368··=·127;·then..ech | |||
| 0003f220:·6f20·2224·7374·6465·7272·5f6f·665f·6361··o·"$stderr_of_ca | |||
| 0003f230:·6c6c·2220·2667·743b·2661·6d70·3b32·0a09··ll"·>&2.. | |||
| 0003f240:·6563·686f·2022·4d61·6b65·2073·7572·6520··echo·"Make·sure· | |||
| 0003f250:·7468·6174·2074·6865·2073·6372·6970·7420··that·the·script· | |||
| 0003f260:·6973·2069·6e73·7461·6c6c·6564·206f·6e20··is·installed·on· | |||
| 0003f270:·7468·6520·7265·6d65·6469·6174·6564·2073··the·remediated·s | |||
| 0003f280:·7973·7465·6d2e·2220·2667·743b·2661·6d70··ystem."·>& | |||
| 0003f290:·3b32·0a09·6563·686f·2022·5365·6520·6f75··;2..echo·"See·ou | |||
| 0003f2a0:·7470·7574·206f·6620·7468·6520·2764·6e66··tput·of·the·'dnf | |||
| 0003f2b0:·2070·726f·7669·6465·7320·7570·6461·7465···provides·update | |||
| 0003f2c0:·2d63·7279·7074·6f2d·706f·6c69·6369·6573··-crypto-policies | |||
| 0003f2d0:·2720·636f·6d6d·616e·6422·2026·6774·3b26··'·command"·>& | |||
| 0003f2e0:·616d·703b·320a·0965·6368·6f20·2274·6f20··amp;2..echo·"to· | |||
| 0003f2f0:·7365·6520·7768·6174·2070·6163·6b61·6765··see·what·package | |||
| 0003f300:·2074·6f20·2872·6529·696e·7374·616c·6c22···to·(re)install" | |||
| 0003f310:·2026·6774·3b26·616d·703b·320a·0a09·6661···>&2...fa | |||
| 0003f320:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003f330:·616e·2065·7272·6f72·2063·6f64·650a·656c··an·error·code.el | |||
| 0003f340:·6966·2074·6573·7420·2224·7263·2220·213d··if·test·"$rc"·!= | |||
| 0003f350:·2030·3b20·7468·656e·0a09·6563·686f·2022···0;·then..echo·" | |||
| 0003f360:·4572·726f·7220·696e·766f·6b69·6e67·2074··Error·invoking·t | |||
| 0003f370:·6865·2075·7064·6174·652d·6372·7970·746f··he·update-crypto | |||
| 0003f380:·2d70·6f6c·6963·6965·7320·7363·7269·7074··-policies·script | |||
| 0003f390:·3a20·2473·7464·6572·725f·6f66·5f63·616c··:·$stderr_of_cal | |||
| 0003f3a0:·6c22·2026·6774·3b26·616d·703b·320a·0966··l"·>&2..f | |||
| 0003f3b0:·616c·7365·2020·2320·656e·6420·7769·7468··alse··#·end·with | |||
| 0003f3c0:·2061·6e20·6572·726f·7220·636f·6465·0a66···an·error·code.f | |||
| 0003f3d0:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003f3e0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003f3f0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003f400:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003f410:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003f420:·6574·3d22·2369·646d·3134·3635·2220·7461··et="#idm1465"·ta | |||
| 0003f430:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003f440:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003f450:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003f460:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003f470:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003f480:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003f490:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003f4a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003f4b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003f4c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003f4d0:·6964·3d22·6964·6d31·3436·3522·3e3c·7461··id="idm1465"><ta | |||
| 0003f4e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003f4f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003f500:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003f510:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003f520:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003f | 0003f530:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003f540:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003f550:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003f560:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003f570:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003f580:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003f | 0003f590:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003f5a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003f5b0:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003f5c0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003f5d0:·3e3c·636f·6465·3e2d·206e·616d·653a·2058··><code>-·name:·X | |||
| 0003f5e0:·4343·4446·2056·616c·7565·2076·6172·5f73··CCDF·Value·var_s | |||
| 0003f1a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003f1b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003f1c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003f1d0:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003f1e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003f1f0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003f200:·3a20·5843·4344·4620·5661·6c75·6520·7661··:·XCCDF·Value·va | |||
| 0003f210:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| Max diff block lines reached; 303766/327418 bytes (92.78%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·3 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·3 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 266, 14 lines modified | Offset 266, 34 lines modified | ||
| 266 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 266 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 267 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 267 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 268 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, | 268 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, |
| 269 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 | 269 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 270 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- | 270 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- |
| 271 | ·····················GPOS-00174 | 271 | ·····················GPOS-00174 |
| 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 273 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 274 | var_system_crypto_policy='DEFAULT' | ||
| 275 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 276 | null) | ||
| 277 | rc=$? | ||
| 278 | if·test·"$rc"·=·127;·then | ||
| 279 | » echo·"$stderr_of_call"·>&2 | ||
| 280 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 281 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 282 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 283 | » false··#·end·with·an·error·code | ||
| 284 | elif·test·"$rc"·!=·0;·then | ||
| 285 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 286 | » false··#·end·with·an·error·code | ||
| 287 | fi | ||
| 273 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 288 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 274 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 289 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 275 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 290 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 276 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 291 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 277 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 292 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 278 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 293 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 279 | ··set_fact: | 294 | ··set_fact: |
| Offset 316, 34 lines modified | Offset 336, 14 lines modified | ||
| 316 | ··-·PCI-DSSv4-2.2.7 | 336 | ··-·PCI-DSSv4-2.2.7 |
| 317 | ··-·configure_crypto_policy | 337 | ··-·configure_crypto_policy |
| 318 | ··-·high_severity | 338 | ··-·high_severity |
| 319 | ··-·low_complexity | 339 | ··-·low_complexity |
| 320 | ··-·low_disruption | 340 | ··-·low_disruption |
| 321 | ··-·no_reboot_needed | 341 | ··-·no_reboot_needed |
| 322 | ··-·restrict_strategy | 342 | ··-·restrict_strategy |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | var_system_crypto_policy='DEFAULT' | ||
| 325 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 326 | null) | ||
| 327 | rc=$? | ||
| 328 | if·test·"$rc"·=·127;·then | ||
| 329 | » echo·"$stderr_of_call"·>&2 | ||
| 330 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 331 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 332 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 333 | » false··#·end·with·an·error·code | ||
| 334 | elif·test·"$rc"·!=·0;·then | ||
| 335 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 336 | » false··#·end·with·an·error·code | ||
| 337 | fi | ||
| 338 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 343 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 339 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many | 344 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many |
| 340 | packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up | 345 | packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up |
| 341 | to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured | 346 | to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured |
| 342 | correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies | 347 | correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies |
| 343 | targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is | 348 | targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is |
| 344 | configured·to·use·the·system-wide·crypto·policy·settings. | 349 | configured·to·use·the·system-wide·crypto·policy·settings. |
| Offset 351, 14 lines modified | Offset 351, 22 lines modified | ||
| 351 | ············expectations,·and·makes·system·configuration·more·fragmented. | 351 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| 352 | Severity: ··high | 352 | Severity: ··high |
| 353 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy | 353 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy |
| 354 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 | 354 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 |
| 355 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 355 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 356 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) | 356 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) |
| 357 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000120-GPOS-00061 | 357 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000120-GPOS-00061 |
| 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 363 | rm·-f·/etc/krb5.conf.d/crypto-policies | ||
| 364 | ln·-s·/etc/crypto-policies/back-ends/krb5.config·/etc/krb5.conf.d/crypto-policies | ||
| 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 363 | -·name:·Configure·Kerberos·to·use·System·Crypto·Policy | 370 | -·name:·Configure·Kerberos·to·use·System·Crypto·Policy |
| 364 | ··file: | 371 | ··file: |
| Offset 371, 22 lines modified | Offset 379, 14 lines modified | ||
| 371 | ··-·NIST-800-53-SC-13 | 379 | ··-·NIST-800-53-SC-13 |
| 372 | ··-·configure_kerberos_crypto_policy | 380 | ··-·configure_kerberos_crypto_policy |
| 373 | ··-·configure_strategy | 381 | ··-·configure_strategy |
| 374 | ··-·high_severity | 382 | ··-·high_severity |
| 375 | ··-·low_complexity | 383 | ··-·low_complexity |
| 376 | ··-·low_disruption | 384 | ··-·low_disruption |
| 377 | ··-·reboot_required | 385 | ··-·reboot_required |
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 383 | rm·-f·/etc/krb5.conf.d/crypto-policies | ||
| 384 | ln·-s·/etc/crypto-policies/back-ends/krb5.config·/etc/krb5.conf.d/crypto-policies | ||
| 385 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·L\x8Li\x8ib\x8br\x8re\x8es\x8sw\x8wa\x8an\x8n·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 386 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·L\x8Li\x8ib\x8br\x8re\x8es\x8sw\x8wa\x8an\x8n·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 386 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many | 387 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many |
| 387 | packages.·Libreswan·is·supported·by·system·crypto·policy,·but·the·Libreswan | 388 | packages.·Libreswan·is·supported·by·system·crypto·policy,·but·the·Libreswan |
| Max diff block lines reached; 27409/33608 bytes (81.55%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d10:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d20:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d20:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d30:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d30:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d40:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d40:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d50:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d50:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d60:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d60:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d70:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d80:·6f66·2032·3032·342d·3131·2d30·3 | 00037d80:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d90:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037da0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037da0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037db0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037db0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037dc0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037dc0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037dd0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037dd0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037de0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037de0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037df0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037df0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15458, 119 lines modified | Offset 15458, 119 lines modified | ||
| 0003c610:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003c610:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c620:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | 0003c620:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | ||
| 0003c630:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003c630:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c640:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003c640:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c650:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003c650:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c660:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003c660:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003c670:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003c670:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c680:·656d·6564·6961·7469·6f6e·20 | 0003c680:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003c690:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003c6a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c6b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c6 | 0003c690:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003c6a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c6b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c6c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c6d0:·6 | 0003c6d0:·6d31·3333·3822·3e3c·7461·626c·6520·636c··m1338"><table·cl | ||
| 0003c6e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003c6e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003c6f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c | 0003c6f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003c700:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003c710:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003c720:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003c730:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c740:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003c710:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c720:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003c730:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c740:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003c750:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003c760:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c770:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003c780:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003c790:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003c7a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003c7b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003c7c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003c7d0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003c7e0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003c7f0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003c800:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003c810:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003c820:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003c830:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003c840:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003c850:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003c860:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003c870:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003c880:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003c890:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003c8a0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003c8b0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003c8c0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003c8d0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003c8e0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003c8f0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003c900:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003c910:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003c920:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003c930:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003c940:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003c950:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003c960:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c970:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c980:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c990:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c9a0:·7461·7267·6574·3d22·2369·646d·3133·3339··target="#idm1339 | |||
| 0003c9b0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c9c0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c9d0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c9e0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c9f0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ca00:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003ca10:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003ca20:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ca30:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ca40:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ca50:·6522·2069·643d·2269·646d·3133·3339·223e··e"·id="idm1339"> | |||
| 0003ca60:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ca70:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ca80:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ca90:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003caa0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003c | 0003c750:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003c | 0003c760:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003c | 0003c770:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003c780:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003c790:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003c7a0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003c7b0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003c7c0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003c7d0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003c7e0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003c7f0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003c800:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003c810:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003c820:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003c830:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003c840:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003c850:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003c860:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003c870:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003c880:·6574·3d22·2369·646d·3133·3339·2220·7461··et="#idm1339"·ta | |||
| 0003c890:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003c8a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003c8b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003c8c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c8d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c8e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c8f0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003c900:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| Max diff block lines reached; 2342474/2358674 bytes (99.31%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·23 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·23 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:anolis:anolis_os:23 | 43 | ····*·cpe:/o:anolis:anolis_os:23 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 158, 14 lines modified | Offset 158, 31 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | include·install_aide | ||
| 171 | class·install_aide·{ | ||
| 172 | ··package·{·'aide': | ||
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | [[packages]] | ||
| 178 | name·=·"aide" | ||
| 179 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | -·name:·Ensure·aide·is·installed | 185 | -·name:·Ensure·aide·is·installed |
| 171 | ··package: | 186 | ··package: |
| Offset 179, 31 lines modified | Offset 196, 14 lines modified | ||
| 179 | ··-·PCI-DSSv4-11.5.2 | 196 | ··-·PCI-DSSv4-11.5.2 |
| 180 | ··-·enable_strategy | 197 | ··-·enable_strategy |
| 181 | ··-·low_complexity | 198 | ··-·low_complexity |
| 182 | ··-·low_disruption | 199 | ··-·low_disruption |
| 183 | ··-·medium_severity | 200 | ··-·medium_severity |
| 184 | ··-·no_reboot_needed | 201 | ··-·no_reboot_needed |
| 185 | ··-·package_aide_installed | 202 | ··-·package_aide_installed |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | include·install_aide | ||
| 192 | class·install_aide·{ | ||
| 193 | ··package·{·'aide': | ||
| 194 | ····ensure·=>·'installed', | ||
| 195 | ··} | ||
| 196 | } | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 198 | [[packages]] | ||
| 199 | name·=·"aide" | ||
| 200 | version·=·"*" | ||
| 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 202 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 204 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 203 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 205 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 204 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 206 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 205 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 207 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 206 | crontab: | 208 | crontab: |
| 207 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 209 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 397, 14 lines modified | Offset 397, 33 lines modified | ||
| 397 | ············_\x8i_\x8s_\x8m······1446 | 397 | ············_\x8i_\x8s_\x8m······1446 |
| 398 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 398 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 399 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 399 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 400 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 400 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 401 | ·····················FCS_TLSC_EXT.1 | 401 | ·····················FCS_TLSC_EXT.1 |
| 402 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 402 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 403 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 403 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 404 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 405 | var_system_crypto_policy='DEFAULT' | ||
| 406 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 407 | rc=$? | ||
| 408 | if·test·"$rc"·=·127;·then | ||
| 409 | » echo·"$stderr_of_call"·>&2 | ||
| 410 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 411 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 412 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 413 | » false··#·end·with·an·error·code | ||
| 414 | elif·test·"$rc"·!=·0;·then | ||
| 415 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 416 | » false··#·end·with·an·error·code | ||
| 417 | fi | ||
| 404 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 405 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 419 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 406 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 420 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 407 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 421 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 408 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 422 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 409 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 423 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 410 | ··set_fact: | 424 | ··set_fact: |
| Offset 447, 33 lines modified | Offset 466, 14 lines modified | ||
| 447 | ··-·PCI-DSSv4-2.2.7 | 466 | ··-·PCI-DSSv4-2.2.7 |
| 448 | ··-·configure_crypto_policy | 467 | ··-·configure_crypto_policy |
| 449 | ··-·high_severity | 468 | ··-·high_severity |
| 450 | ··-·low_complexity | 469 | ··-·low_complexity |
| 451 | ··-·low_disruption | 470 | ··-·low_disruption |
| 452 | ··-·no_reboot_needed | 471 | ··-·no_reboot_needed |
| 453 | ··-·restrict_strategy | 472 | ··-·restrict_strategy |
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 455 | var_system_crypto_policy='DEFAULT' | ||
| 456 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| Max diff block lines reached; 275783/281988 bytes (97.80%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·3234·2d31·312d·303 | 00037cf0:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15049, 119 lines modified | Offset 15049, 119 lines modified | ||
| 0003ac80:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003ac80:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003ac90:·3133·3338·2220·7461·6269·6e64·6578·3d22··1338"·tabindex=" | 0003ac90:·3133·3338·2220·7461·6269·6e64·6578·3d22··1338"·tabindex=" | ||
| 0003aca0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003aca0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003acb0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003acb0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003acc0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003acc0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003acd0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003acd0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003ace0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003ace0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003acf0:·6469·6174·696f·6e20· | 0003acf0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 0003ad00:· | 0003ad00:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003ad10:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ad20:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ad30:·6c61·7073·6522·2069·643d·2269·646d·3133··lapse"·id="idm13 | |||
| 0003ad40:·3338·223e·3c74·6162·6c65·2063·6c61·7373··38"><table·class | |||
| 0003ad50:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ad10:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ad20:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ad30:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003ad40:·3333·3822·3e3c·7461·626c·6520·636c·6173··338"><table·clas | |||
| 0003ad50:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003ad60:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ad | 0003ad60:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003ad70:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ad80:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ad90:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ada0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003adb0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ad80:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ad90:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ada0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003adb0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003adc0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003add0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ade0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003adf0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003ae00:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003ae10:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003ae20:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003ae30:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003ae40:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003ae50:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003ae60:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003ae70:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003ae80:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003ae90:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003aea0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003aeb0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003aec0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003aed0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003aee0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003aef0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003af00:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003af10:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003af20:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003af30:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003af40:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003af50:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003af60:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003af70:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003af80:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003af90:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003afa0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003afb0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003afc0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003afd0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003afe0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003aff0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b000:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b010:·6765·743d·2223·6964·6d31·3333·3922·2074··get="#idm1339"·t | |||
| 0003b020:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b030:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b040:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b050:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b060:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b070:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b080:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b090:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b0a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b0b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b0c0:·6964·3d22·6964·6d31·3333·3922·3e3c·7461··id="idm1339"><ta | |||
| 0003b0d0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b0e0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b0f0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b100:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b110:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003 | 0003adc0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003 | 0003add0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003 | 0003ade0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003adf0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003ae00:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003ae10:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003ae20:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003ae30:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003ae40:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003ae50:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003ae60:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003ae70:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003ae80:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003ae90:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003aea0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003aeb0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003aec0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003aed0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003aee0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003aef0:·2223·6964·6d31·3333·3922·2074·6162·696e··"#idm1339"·tabin | |||
| 0003af00:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003af10:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003af20:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003af30:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003af40:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003af50:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003af60:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| Max diff block lines reached; 2833962/2845746 bytes (99.59%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·23 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·23 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:anolis:anolis_os:23 | 41 | ····*·cpe:/o:anolis:anolis_os:23 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 114, 14 lines modified | Offset 114, 31 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | include·install_aide | ||
| 127 | class·install_aide·{ | ||
| 128 | ··package·{·'aide': | ||
| 129 | ····ensure·=>·'installed', | ||
| 130 | ··} | ||
| 131 | } | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 141 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 142 | ··package: |
| Offset 135, 31 lines modified | Offset 152, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 152 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 153 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 154 | ··-·low_complexity |
| 138 | ··-·low_disruption | 155 | ··-·low_disruption |
| 139 | ··-·medium_severity | 156 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 158 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | include·install_aide | ||
| 148 | class·install_aide·{ | ||
| 149 | ··package·{·'aide': | ||
| 150 | ····ensure·=>·'installed', | ||
| 151 | ··} | ||
| 152 | } | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 159 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 158 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 160 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 159 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 161 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 160 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 162 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 161 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 163 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 162 | crontab: | 164 | crontab: |
| 163 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 165 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 353, 14 lines modified | Offset 353, 33 lines modified | ||
| 353 | ············_\x8i_\x8s_\x8m······1446 | 353 | ············_\x8i_\x8s_\x8m······1446 |
| 354 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 354 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 355 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 355 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 357 | ·····················FCS_TLSC_EXT.1 | 357 | ·····················FCS_TLSC_EXT.1 |
| 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 361 | var_system_crypto_policy='DEFAULT' | ||
| 362 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 363 | rc=$? | ||
| 364 | if·test·"$rc"·=·127;·then | ||
| 365 | » echo·"$stderr_of_call"·>&2 | ||
| 366 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 367 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 368 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 369 | » false··#·end·with·an·error·code | ||
| 370 | elif·test·"$rc"·!=·0;·then | ||
| 371 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 372 | » false··#·end·with·an·error·code | ||
| 373 | fi | ||
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 361 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 362 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 363 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 364 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 365 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 379 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 366 | ··set_fact: | 380 | ··set_fact: |
| Offset 403, 33 lines modified | Offset 422, 14 lines modified | ||
| 403 | ··-·PCI-DSSv4-2.2.7 | 422 | ··-·PCI-DSSv4-2.2.7 |
| 404 | ··-·configure_crypto_policy | 423 | ··-·configure_crypto_policy |
| 405 | ··-·high_severity | 424 | ··-·high_severity |
| 406 | ··-·low_complexity | 425 | ··-·low_complexity |
| 407 | ··-·low_disruption | 426 | ··-·low_disruption |
| 408 | ··-·no_reboot_needed | 427 | ··-·no_reboot_needed |
| 409 | ··-·restrict_strategy | 428 | ··-·restrict_strategy |
| 410 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 411 | var_system_crypto_policy='DEFAULT' | ||
| 412 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| Max diff block lines reached; 328620/334696 bytes (98.18%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037d10:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037d20:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037d20:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037d30:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037d30:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d40:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d40:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d50:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d50:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d70:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037d70:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d80:·2d31·312d·303 | 00037d80:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037d90:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d90:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037da0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037da0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037db0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037db0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037dc0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037dc0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037dd0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037dd0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037de0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037de0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037df0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037df0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15457, 119 lines modified | Offset 15457, 119 lines modified | ||
| 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003c610:·743d·2223·6964·6d31·3333·3822·2074·6162··t="#idm1338"·tab | 0003c610:·743d·2223·6964·6d31·3333·3822·2074·6162··t="#idm1338"·tab | ||
| 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | ||
| 0003c680:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003c690:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c6a0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c6b0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c6c0:·643d·2269·646d·3133·3338·223e·3c74·6162··d="idm1338"><tab | |||
| 0003c6d0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c6e0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c6f0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c700:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c710:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c720:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c730:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c | 0003c680:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | ||
| 0003c690:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c6a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c6b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c6c0:·3d22·6964·6d31·3333·3822·3e3c·7461·626c··="idm1338"><tabl | |||
| 0003c6d0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c6e0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c6f0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c700:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c710:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c720:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c730:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c740:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c750:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c760:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c770:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003c780:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003c790:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003c7 | 0003c7a0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003c7b0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003c7c0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003c7d0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003c7e0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003c7f0:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003c800:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003c810:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003c820:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003c760:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c770:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003c780:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003c790:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003c7a0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003c7b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c7c0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003c7d0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003c7e0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003c7f0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003c800:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003c810:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003c820:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003c830:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003c840:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003c850:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003c860:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003c870:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003c880:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003c890:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003c8a0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003c8b0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003c8c0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003c8d0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003c8e0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003c8f0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003c900:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003c910:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003c920:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003c930:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003c940:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003c | 0003c830:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003c | 0003c840:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003c | 0003c850:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003c | 0003c860:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003c | 0003c870:·7461·7267·6574·3d22·2369·646d·3133·3339··target="#idm1339 | ||
| 0003c | 0003c880:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003c | 0003c890:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003c | 0003c8a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003c | 0003c8b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003c | 0003c8c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003c | 0003c8d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ca00:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003ca10:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ca20:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ca30:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ca40:·6c61·7073·6522·2069·643d·2269·646d·3133··lapse"·id="idm13 | |||
| 0003ca50:·3339·223e·3c74·6162·6c65·2063·6c61·7373··39"><table·class | |||
| 0003ca60:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ca70:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ca80:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ca90:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c | 0003c8e0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003c8f0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003c900:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c910:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c920:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c930:·3d22·6964·6d31·3333·3922·3e3c·7072·653e··="idm1339"><pre> | |||
| 0003c940:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003c950:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003c960:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003c970:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c980:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003c990:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| Max diff block lines reached; 2342681/2358881 bytes (99.31%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·8 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·8 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:anolis:anolis_os:8 | 43 | ····*·cpe:/o:anolis:anolis_os:8 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 158, 14 lines modified | Offset 158, 31 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | include·install_aide | ||
| 171 | class·install_aide·{ | ||
| 172 | ··package·{·'aide': | ||
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | [[packages]] | ||
| 178 | name·=·"aide" | ||
| 179 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | -·name:·Ensure·aide·is·installed | 185 | -·name:·Ensure·aide·is·installed |
| 171 | ··package: | 186 | ··package: |
| Offset 179, 31 lines modified | Offset 196, 14 lines modified | ||
| 179 | ··-·PCI-DSSv4-11.5.2 | 196 | ··-·PCI-DSSv4-11.5.2 |
| 180 | ··-·enable_strategy | 197 | ··-·enable_strategy |
| 181 | ··-·low_complexity | 198 | ··-·low_complexity |
| 182 | ··-·low_disruption | 199 | ··-·low_disruption |
| 183 | ··-·medium_severity | 200 | ··-·medium_severity |
| 184 | ··-·no_reboot_needed | 201 | ··-·no_reboot_needed |
| 185 | ··-·package_aide_installed | 202 | ··-·package_aide_installed |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | include·install_aide | ||
| 192 | class·install_aide·{ | ||
| 193 | ··package·{·'aide': | ||
| 194 | ····ensure·=>·'installed', | ||
| 195 | ··} | ||
| 196 | } | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 198 | [[packages]] | ||
| 199 | name·=·"aide" | ||
| 200 | version·=·"*" | ||
| 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 202 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 204 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 203 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 205 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 204 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 206 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 205 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 207 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 206 | crontab: | 208 | crontab: |
| 207 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 209 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 397, 14 lines modified | Offset 397, 33 lines modified | ||
| 397 | ············_\x8i_\x8s_\x8m······1446 | 397 | ············_\x8i_\x8s_\x8m······1446 |
| 398 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 398 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 399 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 399 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 400 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 400 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 401 | ·····················FCS_TLSC_EXT.1 | 401 | ·····················FCS_TLSC_EXT.1 |
| 402 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 402 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 403 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 403 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 404 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 405 | var_system_crypto_policy='DEFAULT' | ||
| 406 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 407 | rc=$? | ||
| 408 | if·test·"$rc"·=·127;·then | ||
| 409 | » echo·"$stderr_of_call"·>&2 | ||
| 410 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 411 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 412 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 413 | » false··#·end·with·an·error·code | ||
| 414 | elif·test·"$rc"·!=·0;·then | ||
| 415 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 416 | » false··#·end·with·an·error·code | ||
| 417 | fi | ||
| 404 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 405 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 419 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 406 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 420 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 407 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 421 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 408 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 422 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 409 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 423 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 410 | ··set_fact: | 424 | ··set_fact: |
| Offset 447, 33 lines modified | Offset 466, 14 lines modified | ||
| 447 | ··-·PCI-DSSv4-2.2.7 | 466 | ··-·PCI-DSSv4-2.2.7 |
| 448 | ··-·configure_crypto_policy | 467 | ··-·configure_crypto_policy |
| 449 | ··-·high_severity | 468 | ··-·high_severity |
| 450 | ··-·low_complexity | 469 | ··-·low_complexity |
| 451 | ··-·low_disruption | 470 | ··-·low_disruption |
| 452 | ··-·no_reboot_needed | 471 | ··-·no_reboot_needed |
| 453 | ··-·restrict_strategy | 472 | ··-·restrict_strategy |
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 455 | var_system_crypto_policy='DEFAULT' | ||
| 456 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| Max diff block lines reached; 275780/281983 bytes (97.80%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037c80:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037c90:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037c90:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037ca0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037ca0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037cb0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037cb0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037cc0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037cc0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037cd0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037cd0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ce0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ce0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037cf0:·3234·2d31·312d·303 | 00037cf0:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00037d00:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d00:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d10:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d10:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d20:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d20:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d30:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d30:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037d40:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037d40:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037d50:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037d50:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037d60:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037d60:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15048, 119 lines modified | Offset 15048, 119 lines modified | ||
| 0003ac70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ac70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ac80:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | 0003ac80:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | ||
| 0003ac90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ac90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003aca0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003aca0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003acb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003acb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003acc0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003acc0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003acd0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003acd0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ace0:·656d·6564·6961·7469·6f6e·20 | 0003ace0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003acf0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003ad00:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ad10:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003a | 0003acf0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003ad00:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ad10:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ad20:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ad30:·6 | 0003ad30:·6d31·3333·3822·3e3c·7461·626c·6520·636c··m1338"><table·cl | ||
| 0003ad40:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ad40:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ad50:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ad | 0003ad50:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003ad70:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ad80:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ad90:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ada0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ad | 0003ad60:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003ad70:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ad80:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003ad90:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ada0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003adb0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003adc0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003add0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ade0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003adf0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003ae00:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003a | 0003ae10:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003ae20:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003ae30:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003ae40:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003ae50:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003ae60:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003ae70:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003ae80:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003ae90:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003add0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003ade0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003adf0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003ae00:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003ae10:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003ae20:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ae30:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003ae40:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003ae50:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003ae60:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003ae70:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003ae80:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003ae90:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003aea0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003aeb0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003aec0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003aed0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003aee0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003aef0:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003af00:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003af10:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003af20:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003af30:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003af40:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003af50:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003af60:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003af70:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003af80:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003af90:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003afa0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003afb0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003a | 0003aea0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003a | 0003aeb0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003a | 0003aec0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003a | 0003aed0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003 | 0003aee0:·6574·3d22·2369·646d·3133·3339·2220·7461··et="#idm1339"·ta | ||
| 0003 | 0003aef0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003 | 0003af00:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003 | 0003af10:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003 | 0003af20:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003 | 0003af30:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003 | 0003af40:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b070:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b080:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b090:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b0a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b0b0:·6522·2069·643d·2269·646d·3133·3339·223e··e"·id="idm1339"> | |||
| 0003b0c0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b0d0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b0e0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b0f0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003 | 0003af50:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003af60:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003af70:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003af80:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003af90:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003afa0:·6d31·3333·3922·3e3c·7072·653e·3c63·6f64··m1339"><pre><cod | |||
| 0003afb0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003afc0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003afd0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003afe0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003aff0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b000:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b010:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b030:·646d·3133·3430·2220·7461·6269·6e64·6578··dm1340"·tabindex | |||
| 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| Max diff block lines reached; 2830098/2846298 bytes (99.43%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·8 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·8 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:anolis:anolis_os:8 | 41 | ····*·cpe:/o:anolis:anolis_os:8 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 114, 14 lines modified | Offset 114, 31 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | include·install_aide | ||
| 127 | class·install_aide·{ | ||
| 128 | ··package·{·'aide': | ||
| 129 | ····ensure·=>·'installed', | ||
| 130 | ··} | ||
| 131 | } | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 141 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 142 | ··package: |
| Offset 135, 31 lines modified | Offset 152, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 152 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 153 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 154 | ··-·low_complexity |
| 138 | ··-·low_disruption | 155 | ··-·low_disruption |
| 139 | ··-·medium_severity | 156 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 158 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | include·install_aide | ||
| 148 | class·install_aide·{ | ||
| 149 | ··package·{·'aide': | ||
| 150 | ····ensure·=>·'installed', | ||
| 151 | ··} | ||
| 152 | } | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 159 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 158 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 160 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 159 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 161 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 160 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 162 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 161 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 163 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 162 | crontab: | 164 | crontab: |
| 163 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 165 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 353, 14 lines modified | Offset 353, 33 lines modified | ||
| 353 | ············_\x8i_\x8s_\x8m······1446 | 353 | ············_\x8i_\x8s_\x8m······1446 |
| 354 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 354 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 355 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 355 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 357 | ·····················FCS_TLSC_EXT.1 | 357 | ·····················FCS_TLSC_EXT.1 |
| 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 361 | var_system_crypto_policy='DEFAULT' | ||
| 362 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 363 | rc=$? | ||
| 364 | if·test·"$rc"·=·127;·then | ||
| 365 | » echo·"$stderr_of_call"·>&2 | ||
| 366 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 367 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 368 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 369 | » false··#·end·with·an·error·code | ||
| 370 | elif·test·"$rc"·!=·0;·then | ||
| 371 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 372 | » false··#·end·with·an·error·code | ||
| 373 | fi | ||
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 361 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 362 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 363 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 364 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 365 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 379 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 366 | ··set_fact: | 380 | ··set_fact: |
| Offset 403, 33 lines modified | Offset 422, 14 lines modified | ||
| 403 | ··-·PCI-DSSv4-2.2.7 | 422 | ··-·PCI-DSSv4-2.2.7 |
| 404 | ··-·configure_crypto_policy | 423 | ··-·configure_crypto_policy |
| 405 | ··-·high_severity | 424 | ··-·high_severity |
| 406 | ··-·low_complexity | 425 | ··-·low_complexity |
| 407 | ··-·low_disruption | 426 | ··-·low_disruption |
| 408 | ··-·no_reboot_needed | 427 | ··-·no_reboot_needed |
| 409 | ··-·restrict_strategy | 428 | ··-·restrict_strategy |
| 410 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 411 | var_system_crypto_policy='DEFAULT' | ||
| 412 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| Max diff block lines reached; 328614/334688 bytes (98.19%) of diff not shown. | |||
| Offset 14565, 15 lines modified | Offset 14565, 15 lines modified | ||
| 00038e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038eb0:·3230·3234·2d31·312d·303 | 00038eb0:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00038ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15321, 236 lines modified | Offset 15321, 236 lines modified | ||
| 0003bd80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003bd80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003bd90:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | 0003bd90:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | ||
| 0003bda0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003bda0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003bdb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003bdb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003bdc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003bdc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003bdd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003bdd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003bde0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003bde0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003bdf0:·656d·6564·6961·7469·6f6e·20 | 0003bdf0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003be00:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003be10:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003be20:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003be | 0003be00:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003be10:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003be20:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003be30:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003be40:·6 | 0003be40:·6d38·3030·3222·3e3c·7461·626c·6520·636c··m8002"><table·cl | ||
| 0003be50:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003be50:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003be60:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003be | 0003be60:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003be70:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003be80:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003be90:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003bea0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003beb0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003bec0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003be80:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003be90:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bea0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003beb0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bec0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bed0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bee0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bef0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003bf00:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003bf10:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b | 0003bed0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003bee0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bf30:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003bf40:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003bf50:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003bf60:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003bf70:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003bf80:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003bf90:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003bfa0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003bfb0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003bfc0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003bfd0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003bfe0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003bff0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003c000:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003c010:·5449·472d·5248·454c·2d30·382d·3031·3033··TIG-RHEL-08-0103 | |||
| 0003c020:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003c030:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003c040:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003c050:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003c060:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003c070:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003c080:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003c090:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003c0a0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003c0b0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003c0c0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003c0d0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003c0e0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003c0f0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003c100:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003c110:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003c120:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003c130:·6765·743d·2223·6964·6d38·3030·3322·2074··get="#idm8003"·t | |||
| 0003c140:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003c150:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003c160:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003c170:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003c180:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c190:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c1a0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003c1b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c1c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c1d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c1e0:·6964·3d22·6964·6d38·3030·3322·3e3c·7461··id="idm8003"><ta | |||
| 0003c1f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c200:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c210:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c220:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c230:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c240:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003c250:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c260:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c270:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c280:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c290:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003c2a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c2b0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003 | 0003bef0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003bf00:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bf10:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003bf20:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003bf30:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003bf40:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003bf50:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003bf60:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003bf70:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003bf80:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003bf90:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003c2d0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003c2e0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003c2f0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003c300:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003c310:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| Max diff block lines reached; 22118255/22150601 bytes (99.85%) of diff not shown. | |||
| Offset 14564, 15 lines modified | Offset 14564, 15 lines modified | ||
| 00038e30:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e30:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e40:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e40:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e50:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e50:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e60:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e60:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e70:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e70:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038e80:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038e80:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038e90:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038e90:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038ea0:·3230·3234·2d31·312d·303 | 00038ea0:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00038eb0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038eb0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ec0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ec0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ed0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ed0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038ee0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038ee0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038ef0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038ef0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f00:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f00:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f10:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f10:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15326, 236 lines modified | Offset 15326, 236 lines modified | ||
| 0003bdd0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003bdd0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003bde0:·3d22·2369·646d·3830·3032·2220·7461·6269··="#idm8002"·tabi | 0003bde0:·3d22·2369·646d·3830·3032·2220·7461·6269··="#idm8002"·tabi | ||
| 0003bdf0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003bdf0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003be00:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003be00:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003be10:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003be10:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003be20:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003be20:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003be30:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003be30:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003be40:·223e·5265·6d65·6469·6174·696f·6e20· | 0003be40:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | ||
| 0003be50:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003be60:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003be70:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003be80:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003be90:·2269·646d·3830·3032·223e·3c74·6162·6c65··"idm8002"><table | |||
| 0003bea0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003be50:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003be60:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003be70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003be80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003be90:·3d22·6964·6d38·3030·3222·3e3c·7461·626c··="idm8002"><tabl | |||
| 0003bea0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003beb0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003be | 0003beb0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003bed0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bee0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003bef0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bf00:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b | 0003bec0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003bed0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003bee0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003bef0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bf00:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003bf10:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003bf20:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bf30:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003bf40:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003bf50:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003bf60:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003bf | 0003bf70:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003bf80:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bf90:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003bfa0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003bfb0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003bfc0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003bfd0:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003bfe0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003bf30:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bf40:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003bf50:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003bf60:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003bf70:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003bf80:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003bf90:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003bfa0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003bfb0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003bfc0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003bfd0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003bfe0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003bff0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003c000:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003c010:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003c020:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003c030:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003c040:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003c050:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003c060:·412d·5354·4947·2d52·4845·4c2d·3038·2d30··A-STIG-RHEL-08-0 | |||
| 0003c070:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003c080:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003c090:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003c0a0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003c0b0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003c0c0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003c0d0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003c0e0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003c0f0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003c100:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003c110:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003c120:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003c130:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003c140:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c150:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c160:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c170:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c180:·7461·7267·6574·3d22·2369·646d·3830·3033··target="#idm8003 | |||
| 0003c190:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c1a0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c1b0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c1c0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c1d0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c1e0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003c1f0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003c200:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c210:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c220:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c230:·6522·2069·643d·2269·646d·3830·3033·223e··e"·id="idm8003"> | |||
| 0003c240:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c250:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c260:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c270:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003c280:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003c290:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003c2a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c2b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003c2c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c2d0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003c2e0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003c2f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003c300:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003c310:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003c320:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c330:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003c340:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| Max diff block lines reached; 22390514/22422860 bytes (99.86%) of diff not shown. | |||
| Offset 14566, 15 lines modified | Offset 14566, 15 lines modified | ||
| 00038e50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038ea0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038ea0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038eb0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038eb0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038ec0:·3230·3234·2d31·312d·303 | 00038ec0:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00038ed0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038ed0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ee0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ee0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ef0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ef0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038f00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038f00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038f10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038f10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15317, 235 lines modified | Offset 15317, 235 lines modified | ||
| 0003bd40:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003bd40:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003bd50:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | 0003bd50:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | ||
| 0003bd60:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003bd60:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003bd70:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003bd70:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003bd80:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003bd80:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003bd90:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003bd90:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003bda0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003bda0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003bdb0:·6469·6174·696f·6e20· | 0003bdb0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 0003bdc0:· | 0003bdc0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003bdd0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bde0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bdf0:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003be00:·3032·223e·3c74·6162·6c65·2063·6c61·7373··02"><table·class | |||
| 0003be10:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bdd0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bde0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bdf0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003be00:·3030·3222·3e3c·7461·626c·6520·636c·6173··002"><table·clas | |||
| 0003be10:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003be20:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003be | 0003be20:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003be30:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003be40:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003be50:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003be60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003be70:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003be80:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003be90:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bea0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003be40:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003be50:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003be60:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003be70:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003be80:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003be90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bea0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003beb0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003bec0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003bed0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003bee0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003bef0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003bf00:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003bf10:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003bf20:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003bf30:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003bf40:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003bf50:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003bf60:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003bf70:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003bf80:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003bf90:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003bfa0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003bfb0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003bfc0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003bfd0:·2d52·4845·4c2d·3038·2d30·3130·3335·390a··-RHEL-08-010359. | |||
| 0003bfe0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003bff0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003c000:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003c010:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003c020:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003c030:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003c040:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003c050:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003c060:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003c070:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003c080:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003c090:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003c0a0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c0b0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003c0c0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003c0d0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003c0e0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003c0f0:·3d22·2369·646d·3830·3033·2220·7461·6269··="#idm8003"·tabi | |||
| 0003c100:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003c110:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003c120:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003c130:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003c140:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003c150:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003c160:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003c170:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c180:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c190:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c1a0:·2269·646d·3830·3033·223e·3c74·6162·6c65··"idm8003"><table | |||
| 0003c1b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c1c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c1d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c1e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c1f0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c200:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c210:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003c220:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003c230:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c240:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003c250:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003c260:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003c270:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003 | 0003beb0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003bec0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bed0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bee0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bef0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003bf00:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003bf10:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003bf20:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003bf30:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003bf40:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003bf50:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003c290:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003c2a0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003c2b0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| Max diff block lines reached; 9173728/9205936 bytes (99.65%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 87 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 87 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 88 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 88 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 147, 53 lines modified | Offset 147, 26 lines modified | ||
| 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 151 | ············_\x8c_\x8i_\x8s············5.3.1 | 151 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | -·name:·Ensure·aide·is·installed | ||
| 160 | ··package: | ||
| 161 | ····name:·aide | ||
| 162 | ····state:·present | ||
| 163 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 164 | ··tags: | ||
| 165 | ··-·CJIS-5.10.1.3 | ||
| 166 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 167 | ··-·NIST-800-53-CM-6(a) | ||
| 168 | ··-·PCI-DSS-Req-11.5 | ||
| 169 | ··-·PCI-DSSv4-11.5.2 | ||
| 170 | ··-·enable_strategy | ||
| 171 | ··-·low_complexity | ||
| 172 | ··-·low_disruption | ||
| 173 | ··-·medium_severity | ||
| 174 | ··-·no_reboot_needed | ||
| 175 | ··-·package_aide_installed | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 181 | include·install_aide | 159 | include·install_aide |
| 182 | class·install_aide·{ | 160 | class·install_aide·{ |
| 183 | ··package·{·'aide': | 161 | ··package·{·'aide': |
| 184 | ····ensure·=>·'installed', | 162 | ····ensure·=>·'installed', |
| 185 | ··} | 163 | ··} |
| 186 | } | 164 | } |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | [[packages]] | ||
| 189 | name·=·"aide" | ||
| 190 | version·=·"*" | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 196 | #·Remediation·is·applicable·only·in·certain·platforms | 170 | #·Remediation·is·applicable·only·in·certain·platforms |
| 197 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 208, 21 lines modified | Offset 181, 48 lines modified | ||
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 209 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 210 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 211 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 212 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 213 | package·install·aide | 186 | package·install·aide |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | [[packages]] | ||
| 189 | name·=·"aide" | ||
| 190 | version·=·"*" | ||
| 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 219 | package·--add=aide | 196 | package·--add=aide |
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 202 | -·name:·Ensure·aide·is·installed | ||
| 203 | ··package: | ||
| 204 | ····name:·aide | ||
| 205 | ····state:·present | ||
| 206 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 207 | ··tags: | ||
| 208 | ··-·CJIS-5.10.1.3 | ||
| 209 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 210 | ··-·NIST-800-53-CM-6(a) | ||
| 211 | ··-·PCI-DSS-Req-11.5 | ||
| 212 | ··-·PCI-DSSv4-11.5.2 | ||
| 213 | ··-·enable_strategy | ||
| 214 | ··-·low_complexity | ||
| 215 | ··-·low_disruption | ||
| 216 | ··-·medium_severity | ||
| 217 | ··-·no_reboot_needed | ||
| 218 | ··-·package_aide_installed | ||
| 220 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 219 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 221 | Run·the·following·command·to·generate·a·new·database: | 220 | Run·the·following·command·to·generate·a·new·database: |
| 222 | $·sudo·/usr/sbin/aide·--init | 221 | $·sudo·/usr/sbin/aide·--init |
| 223 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 222 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 224 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 223 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 225 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 224 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 226 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 225 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 247, 14 lines modified | Offset 247, 28 lines modified | ||
| 247 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 247 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 248 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 248 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 249 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 249 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 250 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 250 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 251 | ············_\x8c_\x8i_\x8s············5.3.1 | 251 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 252 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 252 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 253 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 253 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 254 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1031871/1037836 bytes (99.43%) of diff not shown. | |||
| Offset 14565, 15 lines modified | Offset 14565, 15 lines modified | ||
| 00038e40:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038e40:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038e50:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038e50:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038e60:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038e60:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038e70:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038e70:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038e80:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038e80:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038e90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038e90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038ea0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00038ea0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00038eb0:·2d31·312d·303 | 00038eb0:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00038ec0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038ec0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038ed0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038ed0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038ee0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038ee0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038ef0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038ef0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038f00:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038f00:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038f10:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038f10:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038f20:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038f20:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 14984, 217 lines modified | Offset 14984, 217 lines modified | ||
| 0003a870:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | 0003a870:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | ||
| 0003a880:·3231·3822·2074·6162·696e·6465·783d·2230··218"·tabindex="0 | 0003a880:·3231·3822·2074·6162·696e·6465·783d·2230··218"·tabindex="0 | ||
| 0003a890:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003a890:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003a8a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003a8a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003a8b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003a8b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003a8c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003a8c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003a8d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003a8d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003a8e0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003a8f0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003a900:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003a910:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003a920:·6170·7365·2220·6964·3d22·6964·6d31·3332··apse"·id="idm132 | |||
| 0003a930:·3138·223e·3c74·6162·6c65·2063·6c61·7373··18"><table·class | |||
| 0003a940:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003a8e0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003a8f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003a900:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003a910:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003a920:·6c61·7073·6522·2069·643d·2269·646d·3133··lapse"·id="idm13 | |||
| 0003a930:·3231·3822·3e3c·7461·626c·6520·636c·6173··218"><table·clas | |||
| 0003a940:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003a950:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003a9 | 0003a950:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003a970:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a980:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003a990:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a9a0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003a9 | 0003a960:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003a970:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003a980:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003a990:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003a9a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003a9b0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003a9c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a9d0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003a9e0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003a9f0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003aa00:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003a | 0003aa10:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003aa20:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003aa30:·7564·6520·696e·7374·616c·6c5f·646e·662d··ude·install_dnf- | |||
| 0003a9d0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003a9e0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003a9f0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003aa00:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003aa10:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003aa20:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003aa30:·616d·653a·2045·6e73·7572·6520·646e·662d··ame:·Ensure·dnf- | |||
| 0003aa40:·6175·746f·6d61·7469·6320·6973·2069·6e73··automatic·is·ins | |||
| 0003aa50:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003aa60:·3a0a·2020·2020·6e61·6d65·3a20·646e·662d··:.····name:·dnf- | |||
| 0003aa | 0003aa40:·6175·746f·6d61·7469·630a·0a63·6c61·7373··automatic..class | ||
| 0003aa50:·2069·6e73·7461·6c6c·5f64·6e66·2d61·7574···install_dnf-aut | |||
| 0003aa60:·6f6d·6174·6963·207b·0a20·2070·6163·6b61··omatic·{.··packa | |||
| 0003aa80:·6174·653a·2070·7265·7365·6e74·0a20·2074··ate:·present.··t | |||
| 0003aa90:·6167·733a·0a20·202d·2065·6e61·626c·655f··ags:.··-·enable_ | |||
| 0003aaa0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003aab0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003aac0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003aad0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003aae0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003aaf0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003a | 0003aa70:·6765·207b·2027·646e·662d·6175·746f·6d61··ge·{·'dnf-automa | ||
| 0003a | 0003aa80:·7469·6327·3a0a·2020·2020·656e·7375·7265··tic':.····ensure | ||
| 0003aa90:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003aaa0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003a | 0003aab0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003a | 0003aac0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003a | 0003aad0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003a | 0003aae0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003a | 0003aaf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003ab | 0003ab00:·3133·3231·3922·2074·6162·696e·6465·783d··13219"·tabindex= | ||
| 0003ab | 0003ab10:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003ab | 0003ab20:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003ab | 0003ab30:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003ab | 0003ab40:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003ab | 0003ab50:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003abd0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003ab | 0003ab60:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003ab70:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003ab | 0003ab80:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003a | 0003ab90:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003a | 0003aba0:·6170·7365·2220·6964·3d22·6964·6d31·3332··apse"·id="idm132 | ||
| 0003a | 0003abb0:·3139·223e·3c74·6162·6c65·2063·6c61·7373··19"><table·class | ||
| 0003a | 0003abc0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003a | 0003abd0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003a | 0003abe0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003a | 0003abf0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003ac | 0003ac00:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003ac | 0003ac10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003ac | 0003ac20:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003ac | 0003ac30:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003ac | 0003ac40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003ac | 0003ac50:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003acd0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003ace0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003acf0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003a | 0003ac60:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003ac70:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003ac80:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003ac90:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003a | 0003aca0:·3e3c·7072·653e·3c63·6f64·653e·0a69·6620··><pre><code>.if· | ||
| 0003a | 0003acb0:·2120·7270·6d20·2d71·202d·2d71·7569·6574··!·rpm·-q·--quiet | ||
| 0003a | 0003acc0:·2022·646e·662d·6175·746f·6d61·7469·6322···"dnf-automatic" | ||
| 0003acd0:·203b·2074·6865·6e0a·2020·2020·7975·6d20···;·then.····yum· | |||
| 0003ace0:·696e·7374·616c·6c20·2d79·2022·646e·662d··install·-y·"dnf- | |||
| 0003acf0:·6175·746f·6d61·7469·6322·0a66·690a·3c2f··automatic".fi.</ | |||
| 0003ad40:·6c61·7373·2069·6e73·7461·6c6c·5f64·6e66··lass·install_dnf | |||
| 0003ad50:·2d61·7574·6f6d·6174·6963·207b·0a20·2070··-automatic·{.··p | |||
| 0003ad60:·6163·6b61·6765·207b·2027·646e·662d·6175··ackage·{·'dnf-au | |||
| 0003ad70:·746f·6d61·7469·6327·3a0a·2020·2020·656e··tomatic':.····en | |||
| Max diff block lines reached; 3111865/3141589 bytes (99.05%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 86 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 87 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 87 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 88 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 88 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 111, 47 lines modified | Offset 111, 26 lines modified | ||
| 111 | $·sudo·yum·install·dnf-automatic | 111 | $·sudo·yum·install·dnf-automatic |
| 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 113 | ············suitable·for·automatic,·regular·execution. | 113 | ············suitable·for·automatic,·regular·execution. |
| 114 | Severity: ··medium | 114 | Severity: ··medium |
| 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 116 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 116 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 124 | ··package: | ||
| 125 | ····name:·dnf-automatic | ||
| 126 | ····state:·present | ||
| 127 | ··tags: | ||
| 128 | ··-·enable_strategy | ||
| 129 | ··-·low_complexity | ||
| 130 | ··-·low_disruption | ||
| 131 | ··-·medium_severity | ||
| 132 | ··-·no_reboot_needed | ||
| 133 | ··-·package_dnf-automatic_installed | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | include·install_dnf-automatic | 123 | include·install_dnf-automatic |
| 140 | class·install_dnf-automatic·{ | 124 | class·install_dnf-automatic·{ |
| 141 | ··package·{·'dnf-automatic': | 125 | ··package·{·'dnf-automatic': |
| 142 | ····ensure·=>·'installed', | 126 | ····ensure·=>·'installed', |
| 143 | ··} | 127 | ··} |
| 144 | } | 128 | } |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"dnf-automatic" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 134 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 160, 21 lines modified | Offset 139, 42 lines modified | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | package·install·dnf-automatic | 144 | package·install·dnf-automatic |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"dnf-automatic" | ||
| 148 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | package·--add=dnf-automatic | 154 | package·--add=dnf-automatic |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 161 | ··package: | ||
| 162 | ····name:·dnf-automatic | ||
| 163 | ····state:·present | ||
| 164 | ··tags: | ||
| 165 | ··-·enable_strategy | ||
| 166 | ··-·low_complexity | ||
| 167 | ··-·low_disruption | ||
| 168 | ··-·medium_severity | ||
| 169 | ··-·no_reboot_needed | ||
| 170 | ··-·package_dnf-automatic_installed | ||
| 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 173 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 172 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 174 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 173 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 175 | automatic.conf. | 174 | automatic.conf. |
| 176 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 175 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 177 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 176 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 178 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 177 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 184, 36 lines modified | Offset 184, 14 lines modified | ||
| 184 | Severity: ··medium | 184 | Severity: ··medium |
| 185 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 185 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 186 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 186 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 187 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 187 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 188 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 188 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 189 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 189 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 190 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 190 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 196 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 197 | ··ini_file: | ||
| 198 | ····dest:·/etc/dnf/automatic.conf | ||
| 199 | ····section:·commands | ||
| 200 | ····option:·apply_updates | ||
| 201 | ····value:·'yes' | ||
| 202 | ····create:·true | ||
| 203 | ··tags: | ||
| Max diff block lines reached; 208113/213781 bytes (97.35%) of diff not shown. | |||
| Offset 14548, 15 lines modified | Offset 14548, 15 lines modified | ||
| 00038d30:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00038d30:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00038d40:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00038d40:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038d50:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038d50:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038d60:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038d60:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038d70:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038d70:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038d80:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038d80:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038d90:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00038d90:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00038da0:·3131·2d30·3 | 00038da0:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00038db0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038db0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038dc0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038dc0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038dd0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038dd0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038de0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038de0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00038df0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00038df0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00038e00:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00038e00:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00038e10:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00038e10:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15367, 235 lines modified | Offset 15367, 235 lines modified | ||
| 0003c060:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003c060:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003c070:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | 0003c070:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | ||
| 0003c080:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003c080:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003c090:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003c090:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003c0a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003c0a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003c0b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003c0b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003c0c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003c0c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003c0d0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003c0e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003c0f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c100:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003c110:·6170·7365·2220·6964·3d22·6964·6d38·3030··apse"·id="idm800 | |||
| 0003c120:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003c130:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003c0d0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003c0e0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c0f0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c100:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c110:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c120:·3032·223e·3c74·6162·6c65·2063·6c61·7373··02"><table·class | |||
| 0003c130:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c140:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c1 | 0003c140:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003c150:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003c160:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003c170:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003c180:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c190:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003c1a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c1b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003c1c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003c160:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c170:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c180:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c190:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003c1a0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003c1b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c1c0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003c1d0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003c1e0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003c1f0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003c200:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003c210:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003c220:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003c230:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003c240:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003c250:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003c260:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003c270:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003c280:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003c290:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003c2a0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003c2b0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003c2c0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003c2d0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c2e0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003c2f0:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003c300:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003c310:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003c320:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003c330:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003c340:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003c350:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003c360:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003c370:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003c380:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003c390:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003c3a0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003c3b0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003c3c0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c3d0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c3e0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c3f0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c400:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c410:·2223·6964·6d38·3030·3322·2074·6162·696e··"#idm8003"·tabin | |||
| 0003c420:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c430:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c440:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c450:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c460:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c470:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003c480:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003c490:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c4a0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c4b0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c4c0:·6964·6d38·3030·3322·3e3c·7461·626c·6520··idm8003"><table· | |||
| 0003c4d0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c4e0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c4f0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c500:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c510:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c520:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c530:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003c540:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003c550:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c560:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003c570:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003c580:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003c590:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003c | 0003c1d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003c1e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003c1f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003c200:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003c210:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003c220:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003c230:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003c240:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003c250:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003c260:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003c270:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003c5b0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| Max diff block lines reached; 25354663/25386871 bytes (99.87%) of diff not shown. | |||
| Offset 14548, 15 lines modified | Offset 14548, 15 lines modified | ||
| 00038d30:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038d30:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038d40:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038d40:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038d50:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038d50:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038d60:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038d60:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038d70:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038d70:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038d80:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038d80:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038d90:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038d90:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038da0:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00038da0:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00038db0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038db0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038dc0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038dc0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038dd0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038dd0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038de0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038de0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038df0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038df0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038e00:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038e00:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038e10:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038e10:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15336, 235 lines modified | Offset 15336, 235 lines modified | ||
| 0003be70:·7267·6574·3d22·2369·646d·3830·3032·2220··rget="#idm8002"· | 0003be70:·7267·6574·3d22·2369·646d·3830·3032·2220··rget="#idm8002"· | ||
| 0003be80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003be80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003be90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003be90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bea0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bea0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003beb0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003beb0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bec0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bec0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bed0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bed0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bee0:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003bef0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bf00:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bf10:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bf20:·2069·643d·2269·646d·3830·3032·223e·3c74···id="idm8002"><t | |||
| 0003bf30:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003bf40:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bee0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003bef0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bf00:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bf10:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bf20:·2220·6964·3d22·6964·6d38·3030·3222·3e3c··"·id="idm8002">< | |||
| 0003bf30:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bf40:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bf50:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bf | 0003bf50:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003bf60:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003bf70:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003bf80:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003bf70:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bf80:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bf90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bfa0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bfb0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bfc0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003bfd0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003bfe0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bff0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003c000:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003c010:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c020:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003c030:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003c040:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003c050:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003c060:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003c070:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003c080:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003c090:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003c0a0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003c0b0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003c0c0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003c0d0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003c0e0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003c0f0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003c100:·3038·2d30·3130·3335·390a·2020·2d20·4e49··08-010359.··-·NI | |||
| 0003c110:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003c120:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003c130:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003c140:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003c150:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003c160:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003c170:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003c180:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003c190:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003c1a0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003c1b0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003c1c0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003c1d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003c1e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003c1f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003c200:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003c210:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003c220:·3830·3033·2220·7461·6269·6e64·6578·3d22··8003"·tabindex=" | |||
| 0003c230:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003c240:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003c250:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003c260:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003c270:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003c280:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003c290:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c2a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c2b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c2c0:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c2d0:·3033·223e·3c74·6162·6c65·2063·6c61·7373··03"><table·class | |||
| 0003c2e0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c2f0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c300:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c310:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c320:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c330:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c340:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003c350:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003c360:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c370:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003c380:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003c390:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003c3a0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003 | 0003bf90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 0003bfa0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003bfb0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bfc0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003bfd0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003bfe0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bff0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c000:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003c010:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003c020:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003c030:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003c | 0003c040:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | ||
| 0003c050:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003c060:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003c070:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003c080:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003c3e0:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| Max diff block lines reached; 10790255/10822463 bytes (99.70%) of diff not shown. | |||
| Offset 70, 15 lines modified | Offset 70, 15 lines modified | ||
| 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 74 | ····*·cpe:/o:centos:centos:8 | 74 | ····*·cpe:/o:centos:centos:8 |
| 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 133, 53 lines modified | Offset 133, 26 lines modified | ||
| 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 137 | ············_\x8c_\x8i_\x8s············5.3.1 | 137 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | -·name:·Ensure·aide·is·installed | ||
| 146 | ··package: | ||
| 147 | ····name:·aide | ||
| 148 | ····state:·present | ||
| 149 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 150 | ··tags: | ||
| 151 | ··-·CJIS-5.10.1.3 | ||
| 152 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 153 | ··-·NIST-800-53-CM-6(a) | ||
| 154 | ··-·PCI-DSS-Req-11.5 | ||
| 155 | ··-·PCI-DSSv4-11.5.2 | ||
| 156 | ··-·enable_strategy | ||
| 157 | ··-·low_complexity | ||
| 158 | ··-·low_disruption | ||
| 159 | ··-·medium_severity | ||
| 160 | ··-·no_reboot_needed | ||
| 161 | ··-·package_aide_installed | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | include·install_aide | 145 | include·install_aide |
| 168 | class·install_aide·{ | 146 | class·install_aide·{ |
| 169 | ··package·{·'aide': | 147 | ··package·{·'aide': |
| 170 | ····ensure·=>·'installed', | 148 | ····ensure·=>·'installed', |
| 171 | ··} | 149 | ··} |
| 172 | } | 150 | } |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | [[packages]] | ||
| 175 | name·=·"aide" | ||
| 176 | version·=·"*" | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | #·Remediation·is·applicable·only·in·certain·platforms | 156 | #·Remediation·is·applicable·only·in·certain·platforms |
| 183 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 194, 21 lines modified | Offset 167, 48 lines modified | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 199 | package·install·aide | 172 | package·install·aide |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | [[packages]] | ||
| 175 | name·=·"aide" | ||
| 176 | version·=·"*" | ||
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 205 | package·--add=aide | 182 | package·--add=aide |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | -·name:·Ensure·aide·is·installed | ||
| 189 | ··package: | ||
| 190 | ····name:·aide | ||
| 191 | ····state:·present | ||
| 192 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 193 | ··tags: | ||
| 194 | ··-·CJIS-5.10.1.3 | ||
| 195 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 196 | ··-·NIST-800-53-CM-6(a) | ||
| 197 | ··-·PCI-DSS-Req-11.5 | ||
| 198 | ··-·PCI-DSSv4-11.5.2 | ||
| 199 | ··-·enable_strategy | ||
| 200 | ··-·low_complexity | ||
| 201 | ··-·low_disruption | ||
| 202 | ··-·medium_severity | ||
| 203 | ··-·no_reboot_needed | ||
| 204 | ··-·package_aide_installed | ||
| 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 207 | Run·the·following·command·to·generate·a·new·database: | 206 | Run·the·following·command·to·generate·a·new·database: |
| 208 | $·sudo·/usr/sbin/aide·--init | 207 | $·sudo·/usr/sbin/aide·--init |
| 209 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 210 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 211 | To·initiate·a·manual·check,·run·the·following·command: | 210 | To·initiate·a·manual·check,·run·the·following·command: |
| 212 | $·sudo·/usr/sbin/aide·--check | 211 | $·sudo·/usr/sbin/aide·--check |
| Offset 226, 14 lines modified | Offset 226, 28 lines modified | ||
| 226 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 226 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 227 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 229 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 230 | ············_\x8c_\x8i_\x8s············5.3.1 | 230 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1305002/1311086 bytes (99.54%) of diff not shown. | |||
| Offset 14550, 15 lines modified | Offset 14550, 15 lines modified | ||
| 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | 00038db0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00038dc0:·2d30·3 | 00038dc0:·2d30·3729·0a20·2020·2020·2020·2020·2020··-07).··········· | ||
| 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15327, 235 lines modified | Offset 15327, 235 lines modified | ||
| 0003bde0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003bde0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003bdf0:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | 0003bdf0:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | ||
| 0003be00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003be00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003be10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003be10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003be20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003be20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003be30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003be30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003be40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003be40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003be50:·6469·6174·696f·6e20· | 0003be50:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 0003be60:· | 0003be60:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003be70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003be80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003be90:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003bea0:·3032·223e·3c74·6162·6c65·2063·6c61·7373··02"><table·class | |||
| 0003beb0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003be70:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003be80:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003be90:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003bea0:·3030·3222·3e3c·7461·626c·6520·636c·6173··002"><table·clas | |||
| 0003beb0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bec0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003be | 0003bec0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003bed0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bee0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bef0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003bf00:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bf10:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003bf20:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003bf30:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bf40:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003bee0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003bef0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003bf00:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bf10:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003bf20:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003bf30:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bf40:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003bf50:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003bf60:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003bf70:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003bf80:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003bf90:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003bfa0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003bfb0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003bfc0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003bfd0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003bfe0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003bff0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003c000:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003c010:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003c020:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003c030:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003c040:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003c050:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003c060:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003c070:·2d52·4845·4c2d·3038·2d30·3130·3335·390a··-RHEL-08-010359. | |||
| 0003c080:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c090:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003c0a0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003c0b0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003c0c0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003c0d0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003c0e0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003c0f0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003c100:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003c110:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003c120:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003c130:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003c140:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c150:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003c160:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003c170:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003c180:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003c190:·3d22·2369·646d·3830·3033·2220·7461·6269··="#idm8003"·tabi | |||
| 0003c1a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003c1b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003c1c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003c1d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003c1e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003c1f0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003c200:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003c210:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c220:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c230:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c240:·2269·646d·3830·3033·223e·3c74·6162·6c65··"idm8003"><table | |||
| 0003c250:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c260:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c270:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c280:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c290:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c2a0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c2b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003c2c0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003c2d0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c2e0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003c2f0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003c300:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003c310:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003 | 0003bf50:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003bf60:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bf70:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bf80:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bf90:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003bfa0:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003bfb0:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003bfc0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003bfd0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003bfe0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003bff0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003c330:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003c340:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003c350:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| Max diff block lines reached; 10493375/10525583 bytes (99.69%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 132, 53 lines modified | Offset 132, 26 lines modified | ||
| 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 136 | ············_\x8c_\x8i_\x8s············5.3.1 | 136 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | -·name:·Ensure·aide·is·installed | ||
| 145 | ··package: | ||
| 146 | ····name:·aide | ||
| 147 | ····state:·present | ||
| 148 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 149 | ··tags: | ||
| 150 | ··-·CJIS-5.10.1.3 | ||
| 151 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 152 | ··-·NIST-800-53-CM-6(a) | ||
| 153 | ··-·PCI-DSS-Req-11.5 | ||
| 154 | ··-·PCI-DSSv4-11.5.2 | ||
| 155 | ··-·enable_strategy | ||
| 156 | ··-·low_complexity | ||
| 157 | ··-·low_disruption | ||
| 158 | ··-·medium_severity | ||
| 159 | ··-·no_reboot_needed | ||
| 160 | ··-·package_aide_installed | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | include·install_aide | 144 | include·install_aide |
| 167 | class·install_aide·{ | 145 | class·install_aide·{ |
| 168 | ··package·{·'aide': | 146 | ··package·{·'aide': |
| 169 | ····ensure·=>·'installed', | 147 | ····ensure·=>·'installed', |
| 170 | ··} | 148 | ··} |
| 171 | } | 149 | } |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | 155 | #·Remediation·is·applicable·only·in·certain·platforms |
| 182 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 156 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 193, 21 lines modified | Offset 166, 48 lines modified | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 198 | package·install·aide | 171 | package·install·aide |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 204 | package·--add=aide | 181 | package·--add=aide |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | -·name:·Ensure·aide·is·installed | ||
| 188 | ··package: | ||
| 189 | ····name:·aide | ||
| 190 | ····state:·present | ||
| 191 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 192 | ··tags: | ||
| 193 | ··-·CJIS-5.10.1.3 | ||
| 194 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 195 | ··-·NIST-800-53-CM-6(a) | ||
| 196 | ··-·PCI-DSS-Req-11.5 | ||
| 197 | ··-·PCI-DSSv4-11.5.2 | ||
| 198 | ··-·enable_strategy | ||
| 199 | ··-·low_complexity | ||
| 200 | ··-·low_disruption | ||
| 201 | ··-·medium_severity | ||
| 202 | ··-·no_reboot_needed | ||
| 203 | ··-·package_aide_installed | ||
| 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 206 | Run·the·following·command·to·generate·a·new·database: | 205 | Run·the·following·command·to·generate·a·new·database: |
| 207 | $·sudo·/usr/sbin/aide·--init | 206 | $·sudo·/usr/sbin/aide·--init |
| 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 210 | To·initiate·a·manual·check,·run·the·following·command: | 209 | To·initiate·a·manual·check,·run·the·following·command: |
| 211 | $·sudo·/usr/sbin/aide·--check | 210 | $·sudo·/usr/sbin/aide·--check |
| Offset 225, 14 lines modified | Offset 225, 28 lines modified | ||
| 225 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 225 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 229 | ············_\x8c_\x8i_\x8s············5.3.1 | 229 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 230 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 230 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 231 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 231 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1268513/1274597 bytes (99.52%) of diff not shown. | |||
| Offset 14550, 15 lines modified | Offset 14550, 15 lines modified | ||
| 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | 00038db0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00038dc0:·2d30·3 | 00038dc0:·2d30·3729·0a20·2020·2020·2020·2020·2020··-07).··········· | ||
| 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15359, 235 lines modified | Offset 15359, 235 lines modified | ||
| 0003bfe0:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | 0003bfe0:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | ||
| 0003bff0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bff0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c000:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003c000:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c010:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003c010:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c020:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003c020:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c030:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003c030:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c040:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003c040:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c050:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003c060:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c070:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c050:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003c060:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c070:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c080:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c090:·2069·643d·2269·646d·3830·3032·223e·3c74···id="idm8002"><t | |||
| 0003c0a0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c0b0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c0c0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c0d0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c0e0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003c0f0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003c100:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c110:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003c120:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c130:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c140:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003c150:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c160:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c170:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003c180:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003c190:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003c1a0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003c1b0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003c1c0:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003c1d0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003c1e0:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003c1f0:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003c200:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003c210:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003c220:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003c230:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003c240:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003c250:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003c260:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003c270:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003c280:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003c290:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003c2a0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003c2b0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003c2c0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003c2d0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003c2e0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003c2f0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003c300:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003c310:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003c320:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003c330:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003c340:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c350:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c360:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c | 0003c080:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003c090:·6964·3d22·6964·6d38·3030·3222·3e3c·7461··id="idm8002"><ta | |||
| 0003c0a0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c0b0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c0c0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c0d0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c0e0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c0f0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003c100:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c110:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c120:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c130:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c140:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003c380:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003c390:·3030·3322·2074·6162·696e·6465·783d·2230··003"·tabindex="0 | |||
| 0003c3a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c3b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c3c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c3d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c3e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c3f0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003c400:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003c410:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c420:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003c430:·6170·7365·2220·6964·3d22·6964·6d38·3030··apse"·id="idm800 | |||
| 0003c440:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003c450:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003c460:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003c470:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003c480:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003c490:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003c4a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c4b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003c4c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c4d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003c4e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003c4f0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003c500:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003c510:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003c | 0003c150:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c | 0003c160:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003c170:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c180:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003c190:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003c1a0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003c | 0003c1b0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | ||
| 0003c1c0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003c1d0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003c1e0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003c1f0:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003c550:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| Max diff block lines reached; 25163215/25195423 bytes (99.87%) of diff not shown. | |||
| Offset 14583, 15 lines modified | Offset 14583, 15 lines modified | ||
| 00038f60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038f60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038f70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038f70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038f80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038f80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038f90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038f90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038fa0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038fa0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038fb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038fb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038fc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038fc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038fd0:·342d·3131·2d30·3 | 00038fd0:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 00038fe0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038fe0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038ff0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038ff0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039000:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039000:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039010:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039010:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039020:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039020:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039030:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039030:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039040:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00039040:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15358, 235 lines modified | Offset 15358, 235 lines modified | ||
| 0003bfd0:·6172·6765·743d·2223·6964·6d38·3030·3222··arget="#idm8002" | 0003bfd0:·6172·6765·743d·2223·6964·6d38·3030·3222··arget="#idm8002" | ||
| 0003bfe0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bfe0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bff0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bff0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c000:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003c000:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c010:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003c010:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c020:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003c020:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c030:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003c030:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c040:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003c050:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c060:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c070:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c080:·2220·6964·3d22·6964·6d38·3030·3222·3e3c··"·id="idm8002">< | |||
| 0003c090:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c0a0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c040:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003c050:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c060:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c070:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c080:·6522·2069·643d·2269·646d·3830·3032·223e··e"·id="idm8002"> | |||
| 0003c090:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c0a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c0b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c0 | 0003c0b0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003c0c0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c0d0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c0e0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c0f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c100:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c110:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c120:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c130:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003c0d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003c0e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003c0f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c100:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003c110:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c120:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003c130:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003c140:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003c150:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003c160:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003c170:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c180:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003c190:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003c1a0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003c1b0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003c1c0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003c1d0:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003c1e0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003c1f0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003c200:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003c210:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003c220:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003c230:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003c240:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003c250:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003c260:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003c270:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003c280:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003c290:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003c2a0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003c2b0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003c2c0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003c2d0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003c2e0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003c2f0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003c300:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003c310:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003c320:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003c330:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c340:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c350:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c360:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c370:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c380:·6d38·3030·3322·2074·6162·696e·6465·783d··m8003"·tabindex= | |||
| 0003c390:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c3a0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c3b0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c3c0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c3d0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c3e0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003c3f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003c400:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c410:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c420:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003c430:·3030·3322·3e3c·7461·626c·6520·636c·6173··003"><table·clas | |||
| 0003c440:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c450:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c460:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c470:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c480:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c490:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c4a0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003c4b0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003c4c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c4d0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c4e0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c4f0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c500:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003c | 0003c140:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c | 0003c150:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003c160:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003c170:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c180:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003c190:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003c | 0003c1a0:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | ||
| 0003c1b0:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003c1c0:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003c1d0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003c1e0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003c540:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| Max diff block lines reached; 9152883/9185091 bytes (99.65%) of diff not shown. | |||
| Offset 79, 15 lines modified | Offset 79, 15 lines modified | ||
| 79 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 79 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 80 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 80 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 81 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 81 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 82 | ····*·cpe:/o:redhat:enterprise_linux:8 | 82 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 83 | ····*·cpe:/o:centos:centos:8 | 83 | ····*·cpe:/o:centos:centos:8 |
| 84 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 84 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 85 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 85 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 86 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 86 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 87 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 87 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 88 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 89 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 90 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 90 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 91 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 91 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 92 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 92 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 93 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 93 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 138, 53 lines modified | Offset 138, 26 lines modified | ||
| 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 142 | ············_\x8c_\x8i_\x8s············5.3.1 | 142 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | -·name:·Ensure·aide·is·installed | ||
| 151 | ··package: | ||
| 152 | ····name:·aide | ||
| 153 | ····state:·present | ||
| 154 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 155 | ··tags: | ||
| 156 | ··-·CJIS-5.10.1.3 | ||
| 157 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 158 | ··-·NIST-800-53-CM-6(a) | ||
| 159 | ··-·PCI-DSS-Req-11.5 | ||
| 160 | ··-·PCI-DSSv4-11.5.2 | ||
| 161 | ··-·enable_strategy | ||
| 162 | ··-·low_complexity | ||
| 163 | ··-·low_disruption | ||
| 164 | ··-·medium_severity | ||
| 165 | ··-·no_reboot_needed | ||
| 166 | ··-·package_aide_installed | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | include·install_aide | 150 | include·install_aide |
| 173 | class·install_aide·{ | 151 | class·install_aide·{ |
| 174 | ··package·{·'aide': | 152 | ··package·{·'aide': |
| 175 | ····ensure·=>·'installed', | 153 | ····ensure·=>·'installed', |
| 176 | ··} | 154 | ··} |
| 177 | } | 155 | } |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | [[packages]] | ||
| 180 | name·=·"aide" | ||
| 181 | version·=·"*" | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | #·Remediation·is·applicable·only·in·certain·platforms | 161 | #·Remediation·is·applicable·only·in·certain·platforms |
| 188 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 199, 21 lines modified | Offset 172, 48 lines modified | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 204 | package·install·aide | 177 | package·install·aide |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | [[packages]] | ||
| 180 | name·=·"aide" | ||
| 181 | version·=·"*" | ||
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 210 | package·--add=aide | 187 | package·--add=aide |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | -·name:·Ensure·aide·is·installed | ||
| 194 | ··package: | ||
| 195 | ····name:·aide | ||
| 196 | ····state:·present | ||
| 197 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 198 | ··tags: | ||
| 199 | ··-·CJIS-5.10.1.3 | ||
| 200 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 201 | ··-·NIST-800-53-CM-6(a) | ||
| 202 | ··-·PCI-DSS-Req-11.5 | ||
| 203 | ··-·PCI-DSSv4-11.5.2 | ||
| 204 | ··-·enable_strategy | ||
| 205 | ··-·low_complexity | ||
| 206 | ··-·low_disruption | ||
| 207 | ··-·medium_severity | ||
| 208 | ··-·no_reboot_needed | ||
| 209 | ··-·package_aide_installed | ||
| 211 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 210 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 212 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 211 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 213 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 212 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 214 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 213 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 214 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 228, 14 lines modified | Offset 228, 27 lines modified | ||
| 228 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 228 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 229 | ············_\x8i_\x8s_\x8m······1446 | 229 | ············_\x8i_\x8s_\x8m······1446 |
| 230 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 230 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 231 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 231 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 232 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 232 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1232324/1238892 bytes (99.47%) of diff not shown. | |||
| Offset 14550, 15 lines modified | Offset 14550, 15 lines modified | ||
| 00038d50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038d50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038d60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038d60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038d70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038d70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038d80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038d80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038d90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038d90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00038db0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00038dc0:·303 | 00038dc0:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00038dd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00038dd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00038de0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00038de0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00038df0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00038df0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038e00:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038e00:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038e10:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038e10:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038e20:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038e20:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038e30:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038e30:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15402, 301 lines modified | Offset 15402, 301 lines modified | ||
| 0003c290:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003c290:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c2a0:·6964·6d37·3636·3222·2074·6162·696e·6465··idm7662"·tabinde | 0003c2a0:·6964·6d37·3636·3222·2074·6162·696e·6465··idm7662"·tabinde | ||
| 0003c2b0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003c2b0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c2c0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003c2c0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c2d0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003c2d0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c2e0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003c2e0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003c2f0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003c2f0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c300:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003c310:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003c320:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c330:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c340:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003c350:·3636·3222·3e3c·7072·653e·3c63·6f64·653e··662"><pre><code> | |||
| 0003c360:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | |||
| 0003c370:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | |||
| 0003c380:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | |||
| 0003c390:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | |||
| 0003c3a0:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | |||
| 0003c3b0:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | |||
| 0003c3c0:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | |||
| 0003c3d0:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | |||
| 0003c3e0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003c3f0:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | |||
| 0003c400:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | |||
| 0003c410:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | |||
| 0003c420:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | |||
| 0003c430:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | |||
| 0003c440:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003c450:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | |||
| 0003c460:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | |||
| 0003c470:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | |||
| 0003c480:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | |||
| 0003c490:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | |||
| 0003c4a0:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | |||
| 0003c4b0:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | |||
| 0003c4c0:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | |||
| 0003c4d0:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | |||
| 0003c4e0:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | |||
| 0003c4f0:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | |||
| 0003c500:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003c510:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | |||
| 0003c520:·2922·0a0a·2020·2020·0a20·2020·2079·756d··)"..····.····yum | |||
| 0003c530:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | |||
| 0003c540:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | |||
| 0003c550:·7461·6c6c·0a20·2020·200a·6669·0a3c·2f63··tall.····.fi.</c | |||
| 0003c560:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003c570:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003c580:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003c590:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003c5a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003c5b0:·6964·6d37·3636·3322·2074·6162·696e·6465··idm7663"·tabinde | |||
| 0003c5c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003c5d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003c5e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003c5f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003c600:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003c | 0003c610:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003c | 0003c620:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003c | 0003c630:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003c | 0003c640:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003c | 0003c650:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003c | 0003c660:·646d·3736·3633·223e·3c74·6162·6c65·2063··dm7663"><table·c | ||
| 0003c | 0003c670:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003c | 0003c680:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003c | 0003c690:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003c | 0003c6a0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003c | 0003c6b0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003c | 0003c6c0:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003c | 0003c6d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003c | 0003c6e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003c | 0003c6f0:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003c | 0003c700:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003c | 0003c710:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003c | 0003c720:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003c | 0003c730:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003c | 0003c740:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003c | 0003c750:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003c | 0003c760:·3c63·6f64·653e·2d20·6e61·6d65·3a20·2753··<code>-·name:·'S | ||
| 0003c | 0003c770:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003c | 0003c780:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003c | 0003c790:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | ||
| 0003c | 0003c7a0:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003c | 0003c7b0:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003c | 0003c7c0:·7374·616c·6c5f·636d·643a·2079·756d·2072··stall_cmd:·yum·r | ||
| 0003c | 0003c7d0:·6569·6e73·7461·6c6c·202d·790a·2020·7768··einstall·-y.··wh | ||
| 0003c | 0003c7e0:·656e·3a20·616e·7369·626c·655f·6469·7374··en:·ansible_dist | ||
| 0003c | 0003c7f0:·7269·6275·7469·6f6e·2069·6e20·5b20·2246··ribution·in·[·"F | ||
| 0003c | 0003c800:·6564·6f72·6122·2c20·2252·6564·4861·7422··edora",·"RedHat" | ||
| 0003c | 0003c810:·2c20·2243·656e·744f·5322·2c20·224f·7261··,·"CentOS",·"Ora | ||
| 0003c | 0003c820:·636c·654c·696e·7578·2220·5d0a·2020·7461··cleLinux"·].··ta | ||
| 0003c | 0003c830:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003c | 0003c840:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003c | 0003c850:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003c | 0003c860:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003c | 0003c870:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003c | 0003c880:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003c | 0003c890:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003c | 0003c8a0:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003c | 0003c8b0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003c | 0003c8c0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003c | 0003c8d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c | 0003c8e0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003c | 0003c8f0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003c | 0003c900:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003c | 0003c910:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003c | 0003c920:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003c | 0003c930:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003c | 0003c940:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003c | 0003c950:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003c | 0003c960:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003c | 0003c970:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| Max diff block lines reached; 6553367/6594683 bytes (99.37%) of diff not shown. | |||
| Offset 70, 15 lines modified | Offset 70, 15 lines modified | ||
| 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 74 | ····*·cpe:/o:centos:centos:8 | 74 | ····*·cpe:/o:centos:centos:8 |
| 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 82 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 82 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 83 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 83 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 84 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 84 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 132, 14 lines modified | Offset 132, 27 lines modified | ||
| 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 141 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 142 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 143 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 144 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 145 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 146 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 144 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 152 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 145 | ··set_fact: | 153 | ··set_fact: |
| Offset 266, 27 lines modified | Offset 279, 14 lines modified | ||
| 266 | ··-·PCI-DSSv4-11.5.2 | 279 | ··-·PCI-DSSv4-11.5.2 |
| 267 | ··-·high_complexity | 280 | ··-·high_complexity |
| 268 | ··-·high_severity | 281 | ··-·high_severity |
| 269 | ··-·medium_disruption | 282 | ··-·medium_disruption |
| 270 | ··-·no_reboot_needed | 283 | ··-·no_reboot_needed |
| 271 | ··-·restrict_strategy | 284 | ··-·restrict_strategy |
| 272 | ··-·rpm_verify_hashes | 285 | ··-·rpm_verify_hashes |
| 273 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 274 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 275 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 276 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 277 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 278 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 279 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 280 | fi | ||
| 281 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 286 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 282 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 287 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 283 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 288 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 284 | run·the·following·command·to·determine·which·package·owns·it: | 289 | run·the·following·command·to·determine·which·package·owns·it: |
| 285 | $·rpm·-qf·FILENAME | 290 | $·rpm·-qf·FILENAME |
| 286 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 291 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 287 | $·sudo·rpm·--setugids·PACKAGENAME | 292 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 305, 14 lines modified | Offset 305, 40 lines modified | ||
| 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 306 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 306 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 311 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 311 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 317 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 318 | declare·-A·SETPERMS_RPM_DICT | ||
| 319 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 320 | #·is·expected·by·the·RPM·database | ||
| 321 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 322 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 323 | do | ||
| 324 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 325 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 326 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 327 | done | ||
| 328 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 329 | #·correct·values | ||
| 330 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 331 | do | ||
| 332 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 333 | done | ||
| 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 317 | -·name:·Read·list·of·files·with·incorrect·ownership | 339 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 318 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 340 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 387, 40 lines modified | Offset 413, 14 lines modified | ||
| 387 | ··-·PCI-DSSv4-11.5.2 | 413 | ··-·PCI-DSSv4-11.5.2 |
| 388 | ··-·high_complexity | 414 | ··-·high_complexity |
| 389 | ··-·high_severity | 415 | ··-·high_severity |
| 390 | ··-·medium_disruption | 416 | ··-·medium_disruption |
| 391 | ··-·no_reboot_needed | 417 | ··-·no_reboot_needed |
| 392 | ··-·restrict_strategy | 418 | ··-·restrict_strategy |
| 393 | ··-·rpm_verify_ownership | 419 | ··-·rpm_verify_ownership |
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 399 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 698258/705990 bytes (98.90%) of diff not shown. | |||
| Offset 14569, 15 lines modified | Offset 14569, 15 lines modified | ||
| 00038e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038ef0:·206f·6620·3230·3234·2d31·312d·303 | 00038ef0:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00038f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15428, 301 lines modified | Offset 15428, 301 lines modified | ||
| 0003c430:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003c430:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c440:·2223·6964·6d37·3636·3222·2074·6162·696e··"#idm7662"·tabin | 0003c440:·2223·6964·6d37·3636·3222·2074·6162·696e··"#idm7662"·tabin | ||
| 0003c450:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003c450:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c460:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003c460:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c470:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003c470:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c480:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003c480:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003c490:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003c490:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003c4a0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003c4a0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003c4b0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003c4c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c4d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c4e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c4f0:·6d37·3636·3222·3e3c·7072·653e·3c63·6f64··m7662"><pre><cod | |||
| 0003c500:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003c510:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003c520:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003c530:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003c540:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003c550:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003c560:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003c570:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003c4b0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003c4c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c4d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c4e0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c4f0:·2269·646d·3736·3632·223e·3c74·6162·6c65··"idm7662"><table | |||
| 0003c500:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c510:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c520:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c530:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c540:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c550:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | |||
| 0003c560:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c570:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c580:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0003c590:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c5a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003c5b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c5c0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c5d0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003c5e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c5f0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003c600:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | |||
| 0003c610:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | |||
| 0003c620:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | |||
| 0003c630:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | |||
| 0003c640:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | |||
| 0003c650:·696e·7374·616c·6c5f·636d·643a·2079·756d··install_cmd:·yum | |||
| 0003c660:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | |||
| 0003c670:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | |||
| 0003c680:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | |||
| 0003c690:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | |||
| 0003c6a0:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | |||
| 0003c6b0:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | |||
| 0003c6c0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003c6d0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | |||
| 0003c6e0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | |||
| 0003c6f0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | |||
| 0003c700:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | |||
| 0003c710:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | |||
| 0003c720:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003c730:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | |||
| 0003c740:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | |||
| 0003c750:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | |||
| 0003c760:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | |||
| 0003c770:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | |||
| 0003c780:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | |||
| 0003c790:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | |||
| 0003c7a0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003c7b0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003c7c0:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | |||
| 0003c7d0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | |||
| 0003c7e0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | |||
| 0003c7f0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | |||
| 0003c800:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003c810:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | |||
| 0003c820:·6567·790a·2020·2d20·7270·6d5f·7665·7269··egy.··-·rpm_veri | |||
| 0003c830:·6679·5f68·6173·6865·730a·0a2d·206e·616d··fy_hashes..-·nam | |||
| 0003c840:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | |||
| 0003c850:·636b·6167·6520·6d61·6e61·6765·7220·7265··ckage·manager·re | |||
| 0003c860:·696e·7374·616c·6c20·636f·6d6d·616e·6420··install·command· | |||
| 0003c870:·287a·7970·7065·7229·270a·2020·7365·745f··(zypper)'.··set_ | |||
| 0003c880:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | |||
| 0003c890:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | |||
| 0003c8a0:·616c·6c5f·636d·643a·207a·7970·7065·7220··all_cmd:·zypper· | |||
| 0003c8b0:·696e·202d·6620·2d79·0a20·2077·6865·6e3a··in·-f·-y.··when: | |||
| 0003c8c0:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | |||
| 0003c8d0:·7574·696f·6e20·3d3d·2022·534c·4553·220a··ution·==·"SLES". | |||
| 0003c8e0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003c8f0:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | |||
| 0003c900:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | |||
| 0003c910:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | |||
| 0003c920:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | |||
| 0003c930:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | |||
| 0003c940:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c950:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | |||
| 0003c960:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | |||
| 0003c970:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c980:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | |||
| 0003c990:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | |||
| 0003c9a0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | |||
| 0003c9b0:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | |||
| 0003c9c0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003c9d0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003c9e0:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | |||
| 0003c9f0:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | |||
| 0003ca00:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | |||
| 0003ca10:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | |||
| 0003ca20:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003ca30:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | |||
| 0003ca40:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | |||
| Max diff block lines reached; 17274294/17299878 bytes (99.85%) of diff not shown. | |||
| Offset 75, 15 lines modified | Offset 75, 15 lines modified | ||
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 78 | ····*·cpe:/o:redhat:enterprise_linux:8 | 78 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 79 | ····*·cpe:/o:centos:centos:8 | 79 | ····*·cpe:/o:centos:centos:8 |
| 80 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 80 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 81 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 81 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 82 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 82 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 83 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 83 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 84 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 84 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 85 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 85 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 86 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 86 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 87 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 87 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 88 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 88 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 89 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 89 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 138, 14 lines modified | Offset 138, 27 lines modified | ||
| 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 147 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 148 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 149 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 150 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 151 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 152 | fi | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 150 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 158 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 151 | ··set_fact: | 159 | ··set_fact: |
| Offset 272, 27 lines modified | Offset 285, 14 lines modified | ||
| 272 | ··-·PCI-DSSv4-11.5.2 | 285 | ··-·PCI-DSSv4-11.5.2 |
| 273 | ··-·high_complexity | 286 | ··-·high_complexity |
| 274 | ··-·high_severity | 287 | ··-·high_severity |
| 275 | ··-·medium_disruption | 288 | ··-·medium_disruption |
| 276 | ··-·no_reboot_needed | 289 | ··-·no_reboot_needed |
| 277 | ··-·restrict_strategy | 290 | ··-·restrict_strategy |
| 278 | ··-·rpm_verify_hashes | 291 | ··-·rpm_verify_hashes |
| 279 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 280 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 281 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 282 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 283 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 284 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 285 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 286 | fi | ||
| 287 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 292 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 288 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 293 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 289 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 294 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 290 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 295 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 291 | $·rpm·-qf·FILENAME | 296 | $·rpm·-qf·FILENAME |
| 292 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 297 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 313, 14 lines modified | Offset 313, 44 lines modified | ||
| 313 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 313 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 314 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 314 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 315 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 315 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 316 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 316 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 317 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 317 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 318 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 318 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 319 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 319 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 321 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 322 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 323 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 324 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 325 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 326 | declare·-A·SETPERMS_RPM_DICT | ||
| 327 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 328 | #·is·expected·by·the·RPM·database | ||
| 329 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 330 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 331 | do | ||
| 332 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 333 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 334 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 335 | ········do | ||
| 336 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 337 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 338 | ········done | ||
| 339 | done | ||
| 340 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 341 | #·correct·values | ||
| 342 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 343 | do | ||
| 344 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 345 | done | ||
| 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 321 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 347 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 322 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 348 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 323 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 349 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 324 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 350 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 325 | -·name:·Read·list·of·files·with·incorrect·permissions | 351 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 326 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 352 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 398, 44 lines modified | Offset 428, 14 lines modified | ||
| 398 | ··-·PCI-DSSv4-11.5.2 | 428 | ··-·PCI-DSSv4-11.5.2 |
| 399 | ··-·high_complexity | 429 | ··-·high_complexity |
| 400 | ··-·high_severity | 430 | ··-·high_severity |
| 401 | ··-·medium_disruption | 431 | ··-·medium_disruption |
| 402 | ··-·no_reboot_needed | 432 | ··-·no_reboot_needed |
| 403 | ··-·restrict_strategy | 433 | ··-·restrict_strategy |
| 404 | ··-·rpm_verify_permissions | 434 | ··-·rpm_verify_permissions |
| 405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 406 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 407 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1365215/1373331 bytes (99.41%) of diff not shown. | |||
| Offset 14562, 15 lines modified | Offset 14562, 15 lines modified | ||
| 00038e10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038e10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038e20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038e20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038e30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038e30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038e40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038e40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038e50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038e50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038e60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038e60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038e70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038e70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038e80:·206f·6620·3230·3234·2d31·312d·303 | 00038e80:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00038e90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038e90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038ea0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038ea0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038eb0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038eb0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038ec0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038ec0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038ed0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038ed0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038ee0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038ee0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038ef0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038ef0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15437, 300 lines modified | Offset 15437, 300 lines modified | ||
| 0003c4c0:·6574·3d22·2369·646d·3736·3632·2220·7461··et="#idm7662"·ta | 0003c4c0:·6574·3d22·2369·646d·3736·3632·2220·7461··et="#idm7662"·ta | ||
| 0003c4d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003c4d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003c4e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003c4e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003c4f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003c4f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003c500:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003c500:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003c510:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003c510:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003c520:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003c520:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003c530:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003c540:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c550:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c560:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c570:·2269·646d·3736·3632·223e·3c70·7265·3e3c··"idm7662"><pre>< | |||
| 0003c580:·636f·6465·3e0a·2320·4669·6e64·2077·6869··code>.#·Find·whi | |||
| 0003c590:·6368·2066·696c·6573·2068·6176·6520·696e··ch·files·have·in | |||
| 0003c5a0:·636f·7272·6563·7420·6861·7368·2028·6e6f··correct·hash·(no | |||
| 0003c5b0:·7420·696e·202f·6574·632c·2062·6563·6175··t·in·/etc,·becau | |||
| 0003c5c0:·7365·206f·6620·7468·6520·7379·7374·656d··se·of·the·system | |||
| 0003c5d0:·2072·656c·6174·6564·2063·6f6e·6669·6720···related·config· | |||
| 0003c5e0:·6669·6c65·7329·2061·6e64·2074·6865·6e20··files)·and·then· | |||
| 0003c5f0:·6765·7420·6669·6c65·7320·6e61·6d65·730a··get·files·names. | |||
| 0003c600:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003c610:·7265·6374·5f68·6173·683d·2224·2872·706d··rect_hash="$(rpm | |||
| 0003c620:·202d·5661·202d·2d6e·6f63·6f6e·6669·6720···-Va·--noconfig· | |||
| 0003c630:·7c20·6772·6570·202d·4520·275e·2e2e·3527··|·grep·-E·'^..5' | |||
| 0003c640:·207c·2061·776b·2027·7b70·7269·6e74·2024···|·awk·'{print·$ | |||
| 0003c650:·4e46·7d27·2029·220a·0a69·6620·5b20·2d6e··NF}'·)"..if·[·-n | |||
| 0003c660:·2022·2466·696c·6573·5f77·6974·685f·696e···"$files_with_in | |||
| 0003c670:·636f·7272·6563·745f·6861·7368·2220·5d3b··correct_hash"·]; | |||
| 0003c680:·2074·6865·6e0a·2020·2020·2320·4672·6f6d···then.····#·From | |||
| 0003c690:·2066·696c·6573·206e·616d·6573·2067·6574···files·names·get | |||
| 0003c6a0:·2070·6163·6b61·6765·206e·616d·6573·2061···package·names·a | |||
| 0003c6b0:·6e64·2063·6861·6e67·6520·6e65·776c·696e··nd·change·newlin | |||
| 0003c6c0:·6520·746f·2073·7061·6365·2c20·6265·6361··e·to·space,·beca | |||
| 0003c6d0:·7573·6520·7270·6d20·7772·6974·6573·2065··use·rpm·writes·e | |||
| 0003c6e0:·6163·6820·7061·636b·6167·6520·746f·206e··ach·package·to·n | |||
| 0003c6f0:·6577·206c·696e·650a·2020·2020·7061·636b··ew·line.····pack | |||
| 0003c700:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | |||
| 0003c710:·6c3d·2224·2872·706d·202d·7166·2024·6669··l="$(rpm·-qf·$fi | |||
| 0003c720:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003c730:·6374·5f68·6173·6820·7c20·7472·2027·5c6e··ct_hash·|·tr·'\n | |||
| 0003c740:·2720·2720·2729·220a·0a20·2020·200a·2020··'·'·')"..····.·· | |||
| 0003c750:·2020·7975·6d20·7265·696e·7374·616c·6c20····yum·reinstall· | |||
| 0003c760:·2d79·2024·7061·636b·6167·6573·5f74·6f5f··-y·$packages_to_ | |||
| 0003c770:·7265·696e·7374·616c·6c0a·2020·2020·0a66··reinstall.····.f | |||
| 0003c780:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003c790:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003c7a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003c7b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003c7c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003c7d0:·6574·3d22·2369·646d·3736·3633·2220·7461··et="#idm7663"·ta | |||
| 0003c7e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003c7f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003c800:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003c810:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c820:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c830:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c | 0003c840:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003c | 0003c850:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003c | 0003c860:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003c | 0003c870:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003c | 0003c880:·6964·3d22·6964·6d37·3636·3322·3e3c·7461··id="idm7663"><ta | ||
| 0003c | 0003c890:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003c | 0003c8a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003c | 0003c8b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003c | 0003c8c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003c | 0003c8d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003c | 0003c8e0:·793a·3c2f·7468·3e3c·7464·3e68·6967·683c··y:</th><td>high< | ||
| 0003c | 0003c8f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c | 0003c900:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003c | 0003c910:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003c | 0003c920:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003c | 0003c930:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003c | 0003c940:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003c | 0003c950:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003c | 0003c960:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003c | 0003c970:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003c | 0003c980:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003c | 0003c990:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| 0003c | 0003c9a0:·636b·6167·6520·6d61·6e61·6765·7220·7265··ckage·manager·re | ||
| 0003c | 0003c9b0:·696e·7374·616c·6c20·636f·6d6d·616e·6427··install·command' | ||
| 0003c | 0003c9c0:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 0003c | 0003c9d0:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | ||
| 0003c | 0003c9e0:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | ||
| 0003c | 0003c9f0:·7975·6d20·7265·696e·7374·616c·6c20·2d79··yum·reinstall·-y | ||
| 0003c | 0003ca00:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | ||
| 0003c | 0003ca10:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003c | 0003ca20:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003c | 0003ca30:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003c | 0003ca40:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003c | 0003ca50:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003c | 0003ca60:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003c | 0003ca70:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003c | 0003ca80:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003c | 0003ca90:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003c | 0003caa0:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003c | 0003cab0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c | 0003cac0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003c | 0003cad0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003c | 0003cae0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c | 0003caf0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003c | 0003cb00:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003c | 0003cb10:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003c | 0003cb20:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003c | 0003cb30:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003c | 0003cb40:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003c | 0003cb50:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003c | 0003cb60:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003c | 0003cb70:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003c | 0003cb80:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003c | 0003cb90:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003c | 0003cba0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| Max diff block lines reached; 10024865/10066043 bytes (99.59%) of diff not shown. | |||
| Offset 73, 15 lines modified | Offset 73, 15 lines modified | ||
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 77 | ····*·cpe:/o:centos:centos:8 | 77 | ····*·cpe:/o:centos:centos:8 |
| 78 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 79 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 79 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 80 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 80 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 81 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 81 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 82 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 82 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 83 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 83 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 84 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 84 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 85 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 85 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 86 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 86 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 87 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 87 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 139, 14 lines modified | Offset 139, 27 lines modified | ||
| 139 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 139 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 140 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 140 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 141 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 141 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 142 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 142 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 144 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 144 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 148 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 149 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 150 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 151 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 152 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 153 | fi | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 151 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 159 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 152 | ··set_fact: | 160 | ··set_fact: |
| Offset 273, 27 lines modified | Offset 286, 14 lines modified | ||
| 273 | ··-·PCI-DSSv4-11.5.2 | 286 | ··-·PCI-DSSv4-11.5.2 |
| 274 | ··-·high_complexity | 287 | ··-·high_complexity |
| 275 | ··-·high_severity | 288 | ··-·high_severity |
| 276 | ··-·medium_disruption | 289 | ··-·medium_disruption |
| 277 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 278 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 279 | ··-·rpm_verify_hashes | 292 | ··-·rpm_verify_hashes |
| 280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 281 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 282 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 283 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 284 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 285 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 286 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 287 | fi | ||
| 288 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 289 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 294 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 290 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 295 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 291 | run·the·following·command·to·determine·which·package·owns·it: | 296 | run·the·following·command·to·determine·which·package·owns·it: |
| 292 | $·rpm·-qf·FILENAME | 297 | $·rpm·-qf·FILENAME |
| 293 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 298 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 294 | $·sudo·rpm·--setugids·PACKAGENAME | 299 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 312, 14 lines modified | Offset 312, 40 lines modified | ||
| 312 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 312 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 313 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 313 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 314 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 314 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 315 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 315 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 316 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 316 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 317 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 317 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 320 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 321 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 322 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 323 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 324 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 325 | declare·-A·SETPERMS_RPM_DICT | ||
| 326 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 327 | #·is·expected·by·the·RPM·database | ||
| 328 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 329 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 330 | do | ||
| 331 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 332 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 333 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 334 | done | ||
| 335 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 336 | #·correct·values | ||
| 337 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 338 | do | ||
| 339 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 340 | done | ||
| 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 341 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 320 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 342 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 321 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 343 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 322 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 344 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 323 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 345 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 324 | -·name:·Read·list·of·files·with·incorrect·ownership | 346 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 325 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 347 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 394, 40 lines modified | Offset 420, 14 lines modified | ||
| 394 | ··-·PCI-DSSv4-11.5.2 | 420 | ··-·PCI-DSSv4-11.5.2 |
| 395 | ··-·high_complexity | 421 | ··-·high_complexity |
| 396 | ··-·high_severity | 422 | ··-·high_severity |
| 397 | ··-·medium_disruption | 423 | ··-·medium_disruption |
| 398 | ··-·no_reboot_needed | 424 | ··-·no_reboot_needed |
| 399 | ··-·restrict_strategy | 425 | ··-·restrict_strategy |
| 400 | ··-·rpm_verify_ownership | 426 | ··-·rpm_verify_ownership |
| 401 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 402 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 403 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 404 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 405 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 406 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1039036/1046768 bytes (99.26%) of diff not shown. | |||
| Offset 14556, 15 lines modified | Offset 14556, 15 lines modified | ||
| 00038db0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038db0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038dc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038dc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038dd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038dd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038de0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038de0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038df0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038df0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038e00:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038e00:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038e10:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038e10:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038e20:·2032·3032·342d·3131·2d30·3 | 00038e20:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 00038e30:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00038e30:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00038e40:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00038e40:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038e50:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038e50:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038e60:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038e60:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038e70:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038e70:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038e80:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038e80:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038e90:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038e90:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15331, 235 lines modified | Offset 15331, 235 lines modified | ||
| 0003be20:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003be20:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003be30:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | 0003be30:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | ||
| 0003be40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003be40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003be50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003be50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003be60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003be60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003be70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003be70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003be80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003be80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003be90:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003bea0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003beb0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bec0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bed0:·6170·7365·2220·6964·3d22·6964·6d38·3030··apse"·id="idm800 | |||
| 0003bee0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003bef0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003be90:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003bea0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003beb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bec0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bed0:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003bee0:·3032·223e·3c74·6162·6c65·2063·6c61·7373··02"><table·class | |||
| 0003bef0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bf00:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bf | 0003bf00:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003bf10:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bf20:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003bf30:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003bf40:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bf50:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003bf60:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bf70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003bf80:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003bf20:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bf30:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003bf40:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bf50:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003bf60:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003bf70:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bf80:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003bf90:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bfa0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bfb0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bfc0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bfd0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003bfe0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003bff0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003c000:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003c010:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003c020:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003c030:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003c040:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003c050:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003c060:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003c070:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003c080:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003c090:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c0a0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003c0b0:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003c0c0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003c0d0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003c0e0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003c0f0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003c100:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003c110:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003c120:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003c130:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003c140:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003c150:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003c160:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003c170:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003c180:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c190:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c1a0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c1b0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c1c0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c1d0:·2223·6964·6d38·3030·3322·2074·6162·696e··"#idm8003"·tabin | |||
| 0003c1e0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c1f0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c200:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c210:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c220:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c230:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003c240:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003c250:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c260:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c270:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c280:·6964·6d38·3030·3322·3e3c·7461·626c·6520··idm8003"><table· | |||
| 0003c290:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c2a0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c2b0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c2c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c2d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c2e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c2f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003c300:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003c310:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c320:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003c330:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003c340:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003c350:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003 | 0003bf90:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003bfa0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bfb0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003bfc0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003bfd0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003bfe0:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003bff0:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003c000:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003c010:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003c020:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003c030:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003c370:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| Max diff block lines reached; 9151089/9183297 bytes (99.65%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 84 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 85 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 85 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 130, 53 lines modified | Offset 130, 26 lines modified | ||
| 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ············_\x8c_\x8i_\x8s············5.3.1 | 134 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | -·name:·Ensure·aide·is·installed | ||
| 143 | ··package: | ||
| 144 | ····name:·aide | ||
| 145 | ····state:·present | ||
| 146 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 147 | ··tags: | ||
| 148 | ··-·CJIS-5.10.1.3 | ||
| 149 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 150 | ··-·NIST-800-53-CM-6(a) | ||
| 151 | ··-·PCI-DSS-Req-11.5 | ||
| 152 | ··-·PCI-DSSv4-11.5.2 | ||
| 153 | ··-·enable_strategy | ||
| 154 | ··-·low_complexity | ||
| 155 | ··-·low_disruption | ||
| 156 | ··-·medium_severity | ||
| 157 | ··-·no_reboot_needed | ||
| 158 | ··-·package_aide_installed | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | include·install_aide | 142 | include·install_aide |
| 165 | class·install_aide·{ | 143 | class·install_aide·{ |
| 166 | ··package·{·'aide': | 144 | ··package·{·'aide': |
| 167 | ····ensure·=>·'installed', | 145 | ····ensure·=>·'installed', |
| 168 | ··} | 146 | ··} |
| 169 | } | 147 | } |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | [[packages]] | ||
| 172 | name·=·"aide" | ||
| 173 | version·=·"*" | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | 153 | #·Remediation·is·applicable·only·in·certain·platforms |
| 180 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 191, 21 lines modified | Offset 164, 48 lines modified | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 196 | package·install·aide | 169 | package·install·aide |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | [[packages]] | ||
| 172 | name·=·"aide" | ||
| 173 | version·=·"*" | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 202 | package·--add=aide | 179 | package·--add=aide |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 185 | -·name:·Ensure·aide·is·installed | ||
| 186 | ··package: | ||
| 187 | ····name:·aide | ||
| 188 | ····state:·present | ||
| 189 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 190 | ··tags: | ||
| 191 | ··-·CJIS-5.10.1.3 | ||
| 192 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 193 | ··-·NIST-800-53-CM-6(a) | ||
| 194 | ··-·PCI-DSS-Req-11.5 | ||
| 195 | ··-·PCI-DSSv4-11.5.2 | ||
| 196 | ··-·enable_strategy | ||
| 197 | ··-·low_complexity | ||
| 198 | ··-·low_disruption | ||
| 199 | ··-·medium_severity | ||
| 200 | ··-·no_reboot_needed | ||
| 201 | ··-·package_aide_installed | ||
| 203 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 202 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 204 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 203 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 205 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 204 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 206 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 205 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 220, 14 lines modified | Offset 220, 27 lines modified | ||
| 220 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 220 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 221 | ············_\x8i_\x8s_\x8m······1446 | 221 | ············_\x8i_\x8s_\x8m······1446 |
| 222 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 222 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 223 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 223 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 224 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 224 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 226 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 226 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1232342/1238910 bytes (99.47%) of diff not shown. | |||
| Offset 14551, 15 lines modified | Offset 14551, 15 lines modified | ||
| 00038d60:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00038d60:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00038d70:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00038d70:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038d80:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038d80:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038d90:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038d90:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038da0:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038da0:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038db0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038db0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038dc0:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | 00038dc0:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | ||
| 00038dd0:·312d·303 | 00038dd0:·312d·3037·290a·2020·2020·2020·2020·2020··1-07).·········· | ||
| 00038de0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00038de0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00038df0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00038df0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00038e00:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00038e00:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00038e10:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00038e10:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00038e20:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00038e20:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00038e30:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00038e30:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00038e40:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00038e40:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15429, 301 lines modified | Offset 15429, 301 lines modified | ||
| 0003c440:·7461·7267·6574·3d22·2369·646d·3736·3632··target="#idm7662 | 0003c440:·7461·7267·6574·3d22·2369·646d·3736·3632··target="#idm7662 | ||
| 0003c450:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003c450:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003c460:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003c460:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003c470:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003c470:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003c480:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003c480:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003c490:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003c490:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003c4a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003c4a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003c4b0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003c4c0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c4d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c4e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c4f0:·2069·643d·2269·646d·3736·3632·223e·3c70···id="idm7662"><p | |||
| 0003c500:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003c510:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003c520:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003c530:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003c540:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003c550:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003c560:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003c570:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003c580:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003c590:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003c5a0:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003c5b0:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003c5c0:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003c5d0:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003c5e0:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003c5f0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003c600:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003c610:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003c620:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003c630:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003c640:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003c650:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003c660:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003c670:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003c680:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003c690:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003c6a0:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003c6b0:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003c6c0:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003c6d0:·200a·2020·2020·7975·6d20·7265·696e·7374···.····yum·reinst | |||
| 0003c6e0:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003c6f0:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003c700:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003c710:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c720:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c730:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c740:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c750:·7461·7267·6574·3d22·2369·646d·3736·3633··target="#idm7663 | |||
| 0003c760:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c770:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c780:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c790:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c7a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c7b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003c | 0003c7c0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003c | 0003c7d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003c | 0003c7e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003c | 0003c7f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003c | 0003c800:·7365·2220·6964·3d22·6964·6d37·3636·3322··se"·id="idm7663" | ||
| 0003c | 0003c810:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003c | 0003c820:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003c | 0003c830:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003c | 0003c840:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003c | 0003c850:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003c | 0003c860:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003c | 0003c870:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003c | 0003c880:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003c | 0003c890:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003c | 0003c8a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c | 0003c8b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003c | 0003c8c0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003c | 0003c8d0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003c | 0003c8e0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003c | 0003c8f0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003c | 0003c900:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003c | 0003c910:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003c | 0003c920:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003c | 0003c930:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003c | 0003c940:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003c | 0003c950:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003c | 0003c960:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003c | 0003c970:·6d64·3a20·7975·6d20·7265·696e·7374·616c··md:·yum·reinstal | ||
| 0003c | 0003c980:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | ||
| 0003c | 0003c990:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003c | 0003c9a0:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003c | 0003c9b0:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003c | 0003c9c0:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003c | 0003c9d0:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003c | 0003c9e0:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003c | 0003c9f0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003c | 0003ca00:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003c | 0003ca10:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003c | 0003ca20:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003c | 0003ca30:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003c | 0003ca40:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003c | 0003ca50:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c | 0003ca60:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003c | 0003ca70:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003c | 0003ca80:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003c | 0003ca90:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c | 0003caa0:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003c | 0003cab0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003c | 0003cac0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003c | 0003cad0:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003c | 0003cae0:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003c | 0003caf0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003c | 0003cb00:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003c | 0003cb10:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003c | 0003cb20:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| Max diff block lines reached; 17181992/17207714 bytes (99.85%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 138, 14 lines modified | Offset 138, 27 lines modified | ||
| 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 147 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 148 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 149 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 150 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 151 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 152 | fi | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 150 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 158 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 151 | ··set_fact: | 159 | ··set_fact: |
| Offset 272, 27 lines modified | Offset 285, 14 lines modified | ||
| 272 | ··-·PCI-DSSv4-11.5.2 | 285 | ··-·PCI-DSSv4-11.5.2 |
| 273 | ··-·high_complexity | 286 | ··-·high_complexity |
| 274 | ··-·high_severity | 287 | ··-·high_severity |
| 275 | ··-·medium_disruption | 288 | ··-·medium_disruption |
| 276 | ··-·no_reboot_needed | 289 | ··-·no_reboot_needed |
| 277 | ··-·restrict_strategy | 290 | ··-·restrict_strategy |
| 278 | ··-·rpm_verify_hashes | 291 | ··-·rpm_verify_hashes |
| 279 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 280 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 281 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 282 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 283 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 284 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 285 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 286 | fi | ||
| 287 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 292 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 288 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 293 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 289 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 294 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 290 | run·the·following·command·to·determine·which·package·owns·it: | 295 | run·the·following·command·to·determine·which·package·owns·it: |
| 291 | $·rpm·-qf·FILENAME | 296 | $·rpm·-qf·FILENAME |
| 292 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 297 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 293 | $·sudo·rpm·--setugids·PACKAGENAME | 298 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 311, 14 lines modified | Offset 311, 40 lines modified | ||
| 311 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 311 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 312 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 312 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 313 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 313 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 314 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 314 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 315 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 315 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 316 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 316 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 317 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 317 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 319 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 320 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 321 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 322 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 323 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 324 | declare·-A·SETPERMS_RPM_DICT | ||
| 325 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 326 | #·is·expected·by·the·RPM·database | ||
| 327 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 328 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 329 | do | ||
| 330 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 331 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 332 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 333 | done | ||
| 334 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 335 | #·correct·values | ||
| 336 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 337 | do | ||
| 338 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 339 | done | ||
| 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 319 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 320 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 321 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 322 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 323 | -·name:·Read·list·of·files·with·incorrect·ownership | 345 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 324 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 346 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 393, 40 lines modified | Offset 419, 14 lines modified | ||
| 393 | ··-·PCI-DSSv4-11.5.2 | 419 | ··-·PCI-DSSv4-11.5.2 |
| 394 | ··-·high_complexity | 420 | ··-·high_complexity |
| 395 | ··-·high_severity | 421 | ··-·high_severity |
| 396 | ··-·medium_disruption | 422 | ··-·medium_disruption |
| 397 | ··-·no_reboot_needed | 423 | ··-·no_reboot_needed |
| 398 | ··-·restrict_strategy | 424 | ··-·restrict_strategy |
| 399 | ··-·rpm_verify_ownership | 425 | ··-·rpm_verify_ownership |
| 400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 401 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 402 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 403 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 404 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 405 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1652229/1659841 bytes (99.54%) of diff not shown. | |||
| Offset 14560, 15 lines modified | Offset 14560, 15 lines modified | ||
| 00038df0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038df0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038e00:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038e00:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038e10:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038e10:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038e20:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038e20:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038e30:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038e30:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038e40:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038e40:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038e50:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038e50:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00038e60:·3032·342d·3131·2d30·3 | 00038e60:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 00038e70:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00038e70:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00038e80:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00038e80:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00038e90:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00038e90:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00038ea0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00038ea0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00038eb0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00038eb0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038ec0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038ec0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038ed0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038ed0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15358, 235 lines modified | Offset 15358, 235 lines modified | ||
| 0003bfd0:·6574·3d22·2369·646d·3830·3032·2220·7461··et="#idm8002"·ta | 0003bfd0:·6574·3d22·2369·646d·3830·3032·2220·7461··et="#idm8002"·ta | ||
| 0003bfe0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003bfe0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003bff0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003bff0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003c000:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003c000:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003c010:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003c010:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003c020:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003c020:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003c030:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003c030:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003c040:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003c050:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c060:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c040:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003c050:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c060:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c070:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c080:·6964·3d22·6964·6d38·3030·3222·3e3c·7461··id="idm8002"><ta | |||
| 0003c090:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c0a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c0b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c0c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c0d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c0e0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003c0f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c100:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c110:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c120:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c130:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003c140:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c150:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003c160:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c170:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003c180:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003c190:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003c1a0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003c1b0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003c1c0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003c1d0:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003c1e0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003c1f0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003c200:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003c210:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003c220:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003c230:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003c240:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003c250:·4953·412d·5354·4947·2d52·4845·4c2d·3038··ISA-STIG-RHEL-08 | |||
| 0003c260:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003c270:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003c280:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003c290:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003c2a0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003c2b0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003c2c0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003c2d0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003c2e0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003c2f0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003c300:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003c310:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003c320:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003c330:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003c340:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003c350:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003c | 0003c070:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003c080:·643d·2269·646d·3830·3032·223e·3c74·6162··d="idm8002"><tab | |||
| 0003c370:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003c380:·3033·2220·7461·6269·6e64·6578·3d22·3022··03"·tabindex="0" | |||
| 0003c390:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003c3a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003c3b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003c3c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003c3d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003c3e0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003c3f0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c | 0003c090:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003c0a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c0b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c0c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c0d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c0e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c0f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c100:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003c110:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c120:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c410:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c420:·7073·6522·2069·643d·2269·646d·3830·3033··pse"·id="idm8003 | |||
| 0003c430:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003c440:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c450:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c460:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c470:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003c480:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003c490:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c4a0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003c4b0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c4c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003c4d0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003c4e0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003c4f0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c | 0003c130:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003c510:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c | 0003c140:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003c150:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003c160:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003c170:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c180:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003c190:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003c | 0003c1a0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | ||
| 0003c1b0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003c1c0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003c1d0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003c540:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003c550:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003c560:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| Max diff block lines reached; 28790083/28822291 bytes (99.89%) of diff not shown. | |||
| Offset 14584, 15 lines modified | Offset 14584, 15 lines modified | ||
| 00038f70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00038f70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00038f80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00038f80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038f90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038f90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038fa0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038fa0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038fb0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038fb0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038fc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038fc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00038fd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00038fd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00038fe0:·6f66·2032·3032·342d·3131·2d30·3 | 00038fe0:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00038ff0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00038ff0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00039000:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00039000:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00039010:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00039010:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00039020:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00039020:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00039030:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00039030:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00039040:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00039040:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00039050:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00039050:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15377, 235 lines modified | Offset 15377, 235 lines modified | ||
| 0003c100:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | 0003c100:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | ||
| 0003c110:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003c110:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c120:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003c120:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c130:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003c130:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c140:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003c140:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c150:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003c150:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c160:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003c160:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c170:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003c180:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c190:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c170:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003c180:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c190:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c1a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c1b0:·2069·643d·2269·646d·3830·3032·223e·3c74···id="idm8002"><t | |||
| 0003c1c0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c1d0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c1e0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c1f0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c200:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003c210:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003c220:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c230:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003c240:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c250:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c260:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003c270:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c280:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c290:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003c2a0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003c2b0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003c2c0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003c2d0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003c2e0:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003c2f0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003c300:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003c310:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003c320:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003c330:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003c340:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003c350:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003c360:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003c370:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003c380:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003c390:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003c3a0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003c3b0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003c3c0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003c3d0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003c3e0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003c3f0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003c400:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003c410:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003c420:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003c430:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003c440:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003c450:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003c460:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c470:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c480:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c | 0003c1a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003c1b0:·6964·3d22·6964·6d38·3030·3222·3e3c·7461··id="idm8002"><ta | |||
| 0003c1c0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c1d0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c1e0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c1f0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c200:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c210:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003c220:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c230:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c240:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c250:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c260:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003c270:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c280:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003c290:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c2a0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003c2b0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003c2c0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003c4a0:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003c4b0:·3030·3322·2074·6162·696e·6465·783d·2230··003"·tabindex="0 | |||
| 0003c4c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c4d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c4e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c4f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c500:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c510:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003c520:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003c530:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c540:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003c550:·6170·7365·2220·6964·3d22·6964·6d38·3030··apse"·id="idm800 | |||
| 0003c560:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003c570:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003c580:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003c590:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003c5a0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003c5b0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003c5c0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c5d0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003c5e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c5f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003c600:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003c610:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003c620:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003c630:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003c640:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003c650:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003c | 0003c2d0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | ||
| 0003c2e0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003c2f0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003c300:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| Max diff block lines reached; 28641583/28673791 bytes (99.89%) of diff not shown. | |||
| Offset 14435, 15 lines modified | Offset 14435, 15 lines modified | ||
| 00038620:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038620:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038630:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038630:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038640:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038640:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038650:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038650:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038660:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038660:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038670:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038670:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038680:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038680:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038690:·6620·3230·3234·2d31·312d·303 | 00038690:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 000386a0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000386a0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386b0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386b0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386c0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386c0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386d0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386d0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386e0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386e0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386f0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386f0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038700:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038700:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15180, 234 lines modified | Offset 15180, 234 lines modified | ||
| 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b4c0:·646d·3732·3733·2220·7461·6269·6e64·6578··dm7273"·tabindex | 0003b4c0:·646d·3732·3733·2220·7461·6269·6e64·6578··dm7273"·tabindex | ||
| 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b520:·6d65·6469·6174·696f·6e20· | 0003b520:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | ||
| 0003b530:· | 0003b530:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b540:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b550:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b560:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b570:·3732·3733·223e·3c74·6162·6c65·2063·6c61··7273"><table·cla | |||
| 0003b580:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b540:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b550:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b560:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b570:·6d37·3237·3322·3e3c·7461·626c·6520·636c··m7273"><table·cl | |||
| 0003b580:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b590:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b5 | 0003b590:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b5a0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b5b0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b5c0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b5d0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b5e0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b5b0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b5c0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b5d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b5e0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b5f0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b600:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b610:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b620:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b630:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b640:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b650:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b660:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b670:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b680:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b690:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b6a0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b6b0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b6c0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b6d0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b6e0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b6f0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b700:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b710:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b720:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b730:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003b740:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b750:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b760:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b770:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b780:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b790:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b7a0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b7b0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b7c0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b7d0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b7e0:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b7f0:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b800:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b810:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b820:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b830:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b840:·6172·6765·743d·2223·6964·6d37·3237·3422··arget="#idm7274" | |||
| 0003b850:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b860:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b870:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b880:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b890:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b8a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b8b0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b8c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b8d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b8e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b8f0:·2220·6964·3d22·6964·6d37·3237·3422·3e3c··"·id="idm7274">< | |||
| 0003b900:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b910:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b920:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b930:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b940:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003b5f0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003b600:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b610:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b970:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b980:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b990:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b9a0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b9b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b9c0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b9d0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b9e0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b9f0:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003ba00:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003ba10:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003ba20:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003ba30:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003ba40:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003ba50:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003ba60:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003ba70:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003ba80:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003ba90:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003baa0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bab0:·3732·3735·2220·7461·6269·6e64·6578·3d22··7275"·tabindex=" | |||
| 0003bac0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bad0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bae0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| Max diff block lines reached; 20608977/20641047 bytes (99.84%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038610:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038620:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038620:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038630:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038630:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038640:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038640:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038650:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038650:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038660:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038660:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038670:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038670:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038680:·6620·3230·3234·2d31·312d·303 | 00038680:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00038690:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038690:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386a0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386a0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386b0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386b0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386c0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386c0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386d0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386d0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386e0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386e0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386f0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386f0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15185, 234 lines modified | Offset 15185, 234 lines modified | ||
| 0003b500:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b500:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b510:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | 0003b510:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | ||
| 0003b520:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b520:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b530:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b530:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b540:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b540:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b550:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b550:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b560:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b560:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b570:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b570:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | ||
| 0003b580:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b590:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b5a0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b5b0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b5c0:·6964·6d37·3237·3322·3e3c·7461·626c·6520··idm7273"><table· | |||
| 0003b5d0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b5e0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b5f0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b600:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b610:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b620:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b630:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b580:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b590:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b5a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b5b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b5c0:·2269·646d·3732·3733·223e·3c74·6162·6c65··"idm7273"><table | |||
| 0003b5d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b5e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b5f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b600:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b610:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b620:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b630:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b640:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b650:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b660:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b670:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b680:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b690:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b6a0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b6b0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b6c0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b6d0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b6e0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b6f0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b700:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b710:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b720:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b730:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b740:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b750:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b760:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b770:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b780:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b790:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b7a0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b7b0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b7c0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b7d0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b7e0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b7f0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b800:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b810:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b820:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b830:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b840:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b850:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b860:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b870:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b880:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b890:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b8a0:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | |||
| 0003b8b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b8c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b8d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b8e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b8f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b900:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b910:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b920:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b930:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b940:·7073·6522·2069·643d·2269·646d·3732·3734··pse"·id="idm7274 | |||
| 0003b950:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b960:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b970:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b980:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b990:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b | 0003b640:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b650:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b9c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b | 0003b660:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b670:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b | 0003b680:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003b690:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b6a0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b6b0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b6c0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b6d0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b6e0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b6f0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b700:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b710:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b720:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b730:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b740:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003ba00:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003ba10:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ba20:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003ba30:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003ba40:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003ba50:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003ba60:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| Max diff block lines reached; 21025701/21057771 bytes (99.85%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038630:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038640:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038640:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038650:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038650:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038660:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038660:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038670:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038670:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038680:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038680:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038690:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038690:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 000386a0:·6620·3230·3234·2d31·312d·303 | 000386a0:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 000386b0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000386b0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386c0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386c0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386d0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386d0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386e0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386e0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386f0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386f0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038700:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038700:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038710:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038710:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15176, 234 lines modified | Offset 15176, 234 lines modified | ||
| 0003b470:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003b470:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003b480:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | 0003b480:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | ||
| 0003b490:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b490:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b4a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b4a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b4b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b4b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b4c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b4c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b4d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b4d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b4e0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b4f0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b500:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b510:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b520:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003b530:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003b540:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b4e0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b4f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b500:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b510:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b520:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b530:·3733·223e·3c74·6162·6c65·2063·6c61·7373··73"><table·class | |||
| 0003b540:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b550:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b5 | 0003b550:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b560:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b570:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b580:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b590:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b5a0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b570:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b580:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b590:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b5a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b5b0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b5c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b5d0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b5e0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b5f0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b600:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b610:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b620:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b630:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b640:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b650:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b660:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b670:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b680:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b690:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b6a0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b6b0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b6c0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b6d0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b6e0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b6f0:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b700:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b710:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b720:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b730:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b740:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b750:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b760:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b770:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b780:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b790:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b7a0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b7b0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b7c0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b7d0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b7e0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b7f0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b800:·6574·3d22·2369·646d·3732·3734·2220·7461··et="#idm7274"·ta | |||
| 0003b810:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b820:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b830:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b840:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b850:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b860:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b870:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b880:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b890:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b8a0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b8b0:·643d·2269·646d·3732·3734·223e·3c74·6162··d="idm7274"><tab | |||
| 0003b8c0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b8d0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b8e0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b8f0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b900:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003b5b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b920:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b930:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b940:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b950:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b960:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003b5c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b5d0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b980:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b990:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b9a0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b9b0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b9c0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b9d0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b9e0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b9f0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003ba00:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003ba10:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003ba20:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003ba30:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ba40:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ba50:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ba60:·2d74·6172·6765·743d·2223·6964·6d37·3237··-target="#idm727 | |||
| 0003ba70:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | |||
| 0003ba80:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| Max diff block lines reached; 9009627/9041697 bytes (99.65%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 135, 52 lines modified | Offset 135, 26 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 140 | ············_\x8c_\x8i_\x8s············6.1.1 | 140 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | -·name:·Ensure·aide·is·installed | ||
| 148 | ··package: | ||
| 149 | ····name:·aide | ||
| 150 | ····state:·present | ||
| 151 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 152 | ··tags: | ||
| 153 | ··-·CJIS-5.10.1.3 | ||
| 154 | ··-·NIST-800-53-CM-6(a) | ||
| 155 | ··-·PCI-DSS-Req-11.5 | ||
| 156 | ··-·PCI-DSSv4-11.5.2 | ||
| 157 | ··-·enable_strategy | ||
| 158 | ··-·low_complexity | ||
| 159 | ··-·low_disruption | ||
| 160 | ··-·medium_severity | ||
| 161 | ··-·no_reboot_needed | ||
| 162 | ··-·package_aide_installed | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 168 | include·install_aide | 147 | include·install_aide |
| 169 | class·install_aide·{ | 148 | class·install_aide·{ |
| 170 | ··package·{·'aide': | 149 | ··package·{·'aide': |
| 171 | ····ensure·=>·'installed', | 150 | ····ensure·=>·'installed', |
| 172 | ··} | 151 | ··} |
| 173 | } | 152 | } |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | [[packages]] | ||
| 176 | name·=·"aide" | ||
| 177 | version·=·"*" | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 183 | #·Remediation·is·applicable·only·in·certain·platforms | 158 | #·Remediation·is·applicable·only·in·certain·platforms |
| 184 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 195, 21 lines modified | Offset 169, 47 lines modified | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 200 | package·install·aide | 174 | package·install·aide |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 206 | package·--add=aide | 184 | package·--add=aide |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | -·name:·Ensure·aide·is·installed | ||
| 191 | ··package: | ||
| 192 | ····name:·aide | ||
| 193 | ····state:·present | ||
| 194 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 195 | ··tags: | ||
| 196 | ··-·CJIS-5.10.1.3 | ||
| 197 | ··-·NIST-800-53-CM-6(a) | ||
| 198 | ··-·PCI-DSS-Req-11.5 | ||
| 199 | ··-·PCI-DSSv4-11.5.2 | ||
| 200 | ··-·enable_strategy | ||
| 201 | ··-·low_complexity | ||
| 202 | ··-·low_disruption | ||
| 203 | ··-·medium_severity | ||
| 204 | ··-·no_reboot_needed | ||
| 205 | ··-·package_aide_installed | ||
| 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 208 | Run·the·following·command·to·generate·a·new·database: | 207 | Run·the·following·command·to·generate·a·new·database: |
| 209 | $·sudo·/usr/sbin/aide·--init | 208 | $·sudo·/usr/sbin/aide·--init |
| 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 209 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 211 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 210 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 212 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 211 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 213 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 212 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 233, 14 lines modified | Offset 233, 28 lines modified | ||
| 233 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 233 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 234 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 234 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 235 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 235 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 237 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 237 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 238 | ············_\x8c_\x8i_\x8s············6.1.1 | 238 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 240 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 241 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 242 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| Max diff block lines reached; 981472/987441 bytes (99.40%) of diff not shown. | |||
| Offset 14435, 15 lines modified | Offset 14435, 15 lines modified | ||
| 00038620:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038620:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038630:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038630:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038640:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038640:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038650:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038650:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038660:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038660:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038670:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038670:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038680:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038680:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038690:·3234·2d31·312d·303 | 00038690:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 000386a0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386a0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386b0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386b0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386c0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386c0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386d0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386d0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386e0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386e0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000386f0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000386f0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038700:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038700:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 14854, 217 lines modified | Offset 14854, 217 lines modified | ||
| 0003a050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003a050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003a060:·3d22·2369·646d·3130·3632·3222·2074·6162··="#idm10622"·tab | 0003a060:·3d22·2369·646d·3130·3632·3222·2074·6162··="#idm10622"·tab | ||
| 0003a070:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003a070:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003a080:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003a080:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003a090:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003a090:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003a0a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003a0a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003a0b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003a0b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003a0c0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003a0c0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | ||
| 0003a0d0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003a0e0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003a0f0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003a100:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003a110:·643d·2269·646d·3130·3632·3222·3e3c·7461··d="idm10622"><ta | |||
| 0003a120:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a130:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a140:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a150:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a160:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a170:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003a180:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a | 0003a0d0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | ||
| 0003a0e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a0f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003a100:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003a110:·3d22·6964·6d31·3036·3232·223e·3c74·6162··="idm10622"><tab | |||
| 0003a120:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003a130:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003a140:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003a150:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003a160:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a170:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a180:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a190:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a1a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a1b0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003a1c0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a1d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003a1e0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003a1 | 0003a1f0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003a200:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003a210:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003a1b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003a1c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003a1d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a1e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003a1f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003a200:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003a210:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003a220:· | 0003a220:·616c·6c5f·646e·662d·6175·746f·6d61·7469··all_dnf-automati | ||
| 0003a230:·630a·0a63·6c61·7373·2069·6e73·7461·6c6c··c..class·install | |||
| 0003a240:·5f64·6e66·2d61·7574·6f6d·6174·6963·207b··_dnf-automatic·{ | |||
| 0003a250:·0a20·2070·6163·6b61·6765·207b·2027·646e··.··package·{·'dn | |||
| 0003a260:·662d·6175·746f·6d61·7469·6327·3a0a·2020··f-automatic':.·· | |||
| 0003a270:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003a280:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003a230:·6320·6973·2069·6e73·7461·6c6c·6564·0a20··c·is·installed.· | |||
| 0003a240:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003a250:·6d65·3a20·646e·662d·6175·746f·6d61·7469··me:·dnf-automati | |||
| 0003a260:·630a·2020·2020·7374·6174·653a·2070·7265··c.····state:·pre | |||
| 0003a270:·7365·6e74·0a20·2074·6167·733a·0a20·202d··sent.··tags:.··- | |||
| 0003a280:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003a290:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003a2a0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003a2b0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003a2c0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003a2d0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003a2e0:·2020·2d20·7061·636b·6167·655f·646e·662d····-·package_dnf- | |||
| 0003a2f0:·6175·746f·6d61·7469·635f·696e·7374·616c··automatic_instal | |||
| 0003a | 0003a290:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | ||
| 0003a | 0003a2a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003a | 0003a2b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003a | 0003a2c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003a | 0003a2d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003a | 0003a2e0:·6574·3d22·2369·646d·3130·3632·3322·2074··et="#idm10623"·t | ||
| 0003a | 0003a2f0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003a3 | 0003a300:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003a3 | 0003a310:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003a3 | 0003a320:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003a3 | 0003a330:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003a3 | 0003a340:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003a3 | 0003a350:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | ||
| 0003a3 | 0003a360:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003a3 | 0003a370:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003a3 | 0003a380:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003a | 0003a390:·3d22·6964·6d31·3036·3233·223e·3c74·6162··="idm10623"><tab | ||
| 0003a | 0003a3a0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003a | 0003a3b0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003a | 0003a3c0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003a | 0003a3d0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003a | 0003a3e0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003a | 0003a3f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003a470:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a480:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003a490:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003a4a0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003a4b0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003a4 | 0003a400:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003a410:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a4d0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003a4e0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003a4f0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003a500:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003a510:·696e·7374·616c·6c5f·646e·662d·6175·746f··install_dnf-auto | |||
| 0003a520:·6d61·7469·630a·0a63·6c61·7373·2069·6e73··matic..class·ins | |||
| 0003a530:·7461·6c6c·5f64·6e66·2d61·7574·6f6d·6174··tall_dnf-automat | |||
| 0003a540:·6963·207b·0a20·2070·6163·6b61·6765·207b··ic·{.··package·{ | |||
| 0003a550:·2027·646e·662d·6175·746f·6d61·7469·6327···'dnf-automatic' | |||
| 0003a560:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003a570:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003a580:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003a590:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| Max diff block lines reached; 2931952/2961676 bytes (99.00%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 76 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 77 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 77 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 78 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 101, 47 lines modified | Offset 101, 26 lines modified | ||
| 101 | $·sudo·dnf·install·dnf-automatic | 101 | $·sudo·dnf·install·dnf-automatic |
| 102 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 102 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 103 | ············suitable·for·automatic,·regular·execution. | 103 | ············suitable·for·automatic,·regular·execution. |
| 104 | Severity: ··medium | 104 | Severity: ··medium |
| 105 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 105 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 114 | ··package: | ||
| 115 | ····name:·dnf-automatic | ||
| 116 | ····state:·present | ||
| 117 | ··tags: | ||
| 118 | ··-·enable_strategy | ||
| 119 | ··-·low_complexity | ||
| 120 | ··-·low_disruption | ||
| 121 | ··-·medium_severity | ||
| 122 | ··-·no_reboot_needed | ||
| 123 | ··-·package_dnf-automatic_installed | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | include·install_dnf-automatic | 113 | include·install_dnf-automatic |
| 130 | class·install_dnf-automatic·{ | 114 | class·install_dnf-automatic·{ |
| 131 | ··package·{·'dnf-automatic': | 115 | ··package·{·'dnf-automatic': |
| 132 | ····ensure·=>·'installed', | 116 | ····ensure·=>·'installed', |
| 133 | ··} | 117 | ··} |
| 134 | } | 118 | } |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | [[packages]] | ||
| 137 | name·=·"dnf-automatic" | ||
| 138 | version·=·"*" | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 124 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 150, 21 lines modified | Offset 129, 42 lines modified | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | package·install·dnf-automatic | 134 | package·install·dnf-automatic |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | [[packages]] | ||
| 137 | name·=·"dnf-automatic" | ||
| 138 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | package·--add=dnf-automatic | 144 | package·--add=dnf-automatic |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 151 | ··package: | ||
| 152 | ····name:·dnf-automatic | ||
| 153 | ····state:·present | ||
| 154 | ··tags: | ||
| 155 | ··-·enable_strategy | ||
| 156 | ··-·low_complexity | ||
| 157 | ··-·low_disruption | ||
| 158 | ··-·medium_severity | ||
| 159 | ··-·no_reboot_needed | ||
| 160 | ··-·package_dnf-automatic_installed | ||
| 162 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 163 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 162 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 164 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 163 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 165 | automatic.conf. | 164 | automatic.conf. |
| 166 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 165 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 167 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 166 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 168 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 167 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 174, 36 lines modified | Offset 174, 14 lines modified | ||
| 174 | Severity: ··medium | 174 | Severity: ··medium |
| 175 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 175 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 176 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 176 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 177 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 177 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 178 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 178 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 179 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 179 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 180 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 180 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 186 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 187 | ··ini_file: | ||
| 188 | ····dest:·/etc/dnf/automatic.conf | ||
| 189 | ····section:·commands | ||
| 190 | ····option:·apply_updates | ||
| 191 | ····value:·'yes' | ||
| 192 | ····create:·true | ||
| 193 | ··tags: | ||
| Max diff block lines reached; 205583/211345 bytes (97.27%) of diff not shown. | |||
| Offset 14406, 15 lines modified | Offset 14406, 15 lines modified | ||
| 00038450:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038450:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038460:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038460:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038470:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038470:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038480:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038480:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038490:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038490:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 000384a0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 000384a0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 000384b0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 000384b0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 000384c0:·206f·6620·3230·3234·2d31·312d·303 | 000384c0:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 000384d0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000384d0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000384e0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 000384e0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 000384f0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 000384f0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038500:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038500:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038510:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038510:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038520:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038520:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038530:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038530:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15219, 233 lines modified | Offset 15219, 233 lines modified | ||
| 0003b720:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | 0003b720:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | ||
| 0003b730:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b730:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b740:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b740:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b750:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b750:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b760:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b760:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b770:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b770:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b780:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b780:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b790:·20 | 0003b790:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | ||
| 0003b7a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b7b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b7c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b7d0:·6964·3d22·6964·6d37·3237·3322·3e3c·7461··id="idm7273"><ta | |||
| 0003b7e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b7f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b800:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b810:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b820:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b830:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b840:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b850:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b860:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b870:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b880:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b890:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b8a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b8b0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b8c0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b8d0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b8e0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b8f0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b900:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b910:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b920:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b930:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b940:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b950:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b960:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b970:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b980:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b990:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | |||
| 0003b9a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b9b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b9c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b9d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b9e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b9f0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b | 0003ba00:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003b | 0003ba10:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b | 0003ba20:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b | 0003ba30:·6522·2069·643d·2269·646d·3732·3734·223e··e"·id="idm7274"> | ||
| 0003b | 0003ba40:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003b | 0003ba50:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003b | 0003ba60:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b | 0003ba70:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b82 | 0003ba80:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003b | 0003ba90:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003baa0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b | 0003bab0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b | 0003bac0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003bad0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b | 0003bae0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b | 0003baf0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003bb00:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b | 0003bb10:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003b | 0003bb20:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b8d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b8e0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b8f0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b900:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b910:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b920:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b930:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b940:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b950:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b960:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b970:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b980:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b990:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b9a0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b9b0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b9c0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b9d0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b9e0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b9f0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003ba00:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003ba10:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003ba20:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003ba30:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003ba40:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b | 0003bb30:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 0003bb40:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003bb50:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003bb60:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003bb70:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003bb80:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003bb90:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003bba0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003bbb0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003bbc0:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003bbd0:·2074·6865·6e0a·2020·2020·646e·6620·696e···then.····dnf·in | |||
| 0003bbe0:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003bbf0:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003bc00:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003bc10:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003bc20:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003bc30:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003bc40:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003bc50:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bc60:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bc70:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bc80:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| Max diff block lines reached; 23671278/23703210 bytes (99.87%) of diff not shown. | |||
| Offset 14407, 15 lines modified | Offset 14407, 15 lines modified | ||
| 00038460:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038460:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038470:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038470:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038480:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038480:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038490:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038490:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 000384a0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 000384a0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 000384b0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 000384b0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 000384c0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 000384c0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000384d0:·3234·2d31·312d·303 | 000384d0:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 000384e0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000384e0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000384f0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000384f0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038500:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038500:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038510:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038510:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038520:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038520:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038530:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038530:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038540:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038540:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15187, 234 lines modified | Offset 15187, 234 lines modified | ||
| 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b530:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | 0003b530:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | ||
| 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b590:·5265·6d65·6469·6174·696f·6e20· | 0003b590:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | ||
| 0003b5a0:·6 | 0003b5a0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | ||
| 0003b5b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5e0:·646d·3732·3733·223e·3c74·6162·6c65·2063··dm7273"><table·c | |||
| 0003b5f0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b600:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b610:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b620:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b630:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b640:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b650:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b660:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b670:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b680:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b690:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b6a0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b6b0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b6c0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b6d0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b6e0:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003b6f0:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b700:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b710:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b720:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b730:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003b740:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003b750:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b760:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b770:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b780:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b790:·6765·743d·2223·6964·6d37·3237·3422·2074··get="#idm7274"·t | |||
| 0003b7a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b7b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b7c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b7d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b7e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b7f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b800:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b | 0003b810:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b | 0003b820:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b | 0003b830:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b | 0003b840:·3d22·6964·6d37·3237·3422·3e3c·7461·626c··="idm7274"><tabl | ||
| 0003b | 0003b850:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b60 | 0003b860:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b | 0003b870:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b | 0003b880:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b | 0003b890:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b | 0003b8a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b8b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003b8c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003b8d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b | 0003b8e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003b8f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b | 0003b900:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b | 0003b910:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b | 0003b920:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003b | 0003b930:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003b6e0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b6f0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b700:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b710:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b720:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b730:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b740:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b750:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b760:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b770:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b780:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b790:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b7a0:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b7b0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b7c0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b7d0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b7e0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b7f0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b800:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b810:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b820:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b830:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b840:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b850:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b | 0003b940:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 0003b950:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003b960:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003b970:·6c61·7466·6f72·6d73·0a69·6620·5b20·2120··latforms.if·[·!· | |||
| 0003b980:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003b990:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003b9a0:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003b9b0:·6572·656e·7620·5d3b·2074·6865·6e0a·0a69··erenv·];·then..i | |||
| 0003b9c0:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 0003b9d0:·6574·2022·6169·6465·2220·3b20·7468·656e··et·"aide"·;·then | |||
| 0003b9e0:·0a20·2020·2064·6e66·2069·6e73·7461·6c6c··.····dnf·install | |||
| 0003b9f0:·202d·7920·2261·6964·6522·0a66·690a·0a65···-y·"aide".fi..e | |||
| 0003ba00:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | |||
| 0003ba10:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | |||
| 0003ba20:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | |||
| 0003ba30:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | |||
| 0003ba40:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | |||
| 0003ba50:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ba60:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ba70:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ba80:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| Max diff block lines reached; 10490758/10522828 bytes (99.70%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Server | 58 | ··············Server |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 120, 52 lines modified | Offset 120, 26 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | -·name:·Ensure·aide·is·installed | ||
| 133 | ··package: | ||
| 134 | ····name:·aide | ||
| 135 | ····state:·present | ||
| 136 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 137 | ··tags: | ||
| 138 | ··-·CJIS-5.10.1.3 | ||
| 139 | ··-·NIST-800-53-CM-6(a) | ||
| 140 | ··-·PCI-DSS-Req-11.5 | ||
| 141 | ··-·PCI-DSSv4-11.5.2 | ||
| 142 | ··-·enable_strategy | ||
| 143 | ··-·low_complexity | ||
| 144 | ··-·low_disruption | ||
| 145 | ··-·medium_severity | ||
| 146 | ··-·no_reboot_needed | ||
| 147 | ··-·package_aide_installed | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | include·install_aide | 132 | include·install_aide |
| 154 | class·install_aide·{ | 133 | class·install_aide·{ |
| 155 | ··package·{·'aide': | 134 | ··package·{·'aide': |
| 156 | ····ensure·=>·'installed', | 135 | ····ensure·=>·'installed', |
| 157 | ··} | 136 | ··} |
| 158 | } | 137 | } |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 168 | #·Remediation·is·applicable·only·in·certain·platforms | 143 | #·Remediation·is·applicable·only·in·certain·platforms |
| 169 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 144 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 180, 21 lines modified | Offset 154, 47 lines modified | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | package·install·aide | 159 | package·install·aide |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 191 | package·--add=aide | 169 | package·--add=aide |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | -·name:·Ensure·aide·is·installed | ||
| 176 | ··package: | ||
| 177 | ····name:·aide | ||
| 178 | ····state:·present | ||
| 179 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 180 | ··tags: | ||
| 181 | ··-·CJIS-5.10.1.3 | ||
| 182 | ··-·NIST-800-53-CM-6(a) | ||
| 183 | ··-·PCI-DSS-Req-11.5 | ||
| 184 | ··-·PCI-DSSv4-11.5.2 | ||
| 185 | ··-·enable_strategy | ||
| 186 | ··-·low_complexity | ||
| 187 | ··-·low_disruption | ||
| 188 | ··-·medium_severity | ||
| 189 | ··-·no_reboot_needed | ||
| 190 | ··-·package_aide_installed | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/sbin/aide·--init | 193 | $·sudo·/usr/sbin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 197 | To·initiate·a·manual·check,·run·the·following·command: | 196 | To·initiate·a·manual·check,·run·the·following·command: |
| 198 | $·sudo·/usr/sbin/aide·--check | 197 | $·sudo·/usr/sbin/aide·--check |
| Offset 211, 14 lines modified | Offset 211, 28 lines modified | ||
| 211 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 211 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 212 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 212 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 214 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 214 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 215 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 215 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 216 | ············_\x8c_\x8i_\x8s············6.1.1 | 216 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 217 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 217 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 219 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 220 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| Max diff block lines reached; 1295114/1301139 bytes (99.54%) of diff not shown. | |||
| Offset 14408, 15 lines modified | Offset 14408, 15 lines modified | ||
| 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000384e0:·342d·3131·2d30·3 | 000384e0:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15178, 234 lines modified | Offset 15178, 234 lines modified | ||
| 0003b490:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b490:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b4a0:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | 0003b4a0:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | ||
| 0003b4b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b4b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b4c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b4c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b4d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b4d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b4e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b4e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b4f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b4f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b500:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b500:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | ||
| 0003b510:· | 0003b510:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | ||
| 0003b520:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b530:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b540:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b550:·6964·6d37·3237·3322·3e3c·7461·626c·6520··idm7273"><table· | |||
| 0003b560:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b570:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b580:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b590:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b5a0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b5b0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b5c0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b5d0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b5e0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b5f0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b600:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b610:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b620:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b630:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b640:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b650:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b660:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b670:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b680:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b690:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b6a0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b6b0:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b6c0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b6d0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b6e0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b6f0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b700:·7267·6574·3d22·2369·646d·3732·3734·2220··rget="#idm7274"· | |||
| 0003b710:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b720:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b730:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b740:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b750:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b760:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b770:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b | 0003b780:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b | 0003b790:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b | 0003b7a0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b | 0003b7b0:·643d·2269·646d·3732·3734·223e·3c74·6162··d="idm7274"><tab | ||
| 0003b | 0003b7c0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b | 0003b7d0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b | 0003b7e0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b | 0003b7f0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003b | 0003b800:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003b | 0003b810:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b820:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b | 0003b830:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b | 0003b840:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b850:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b60 | 0003b860:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b | 0003b870:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b | 0003b880:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b | 0003b890:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0003b | 0003b8a0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b650:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b660:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b670:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b680:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b690:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b6a0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b6b0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b6c0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b6d0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b6e0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b6f0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b700:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b710:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b720:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b730:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b740:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b750:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b760:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b770:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b780:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b790:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b7a0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b7b0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b7c0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b | 0003b8b0:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 0003b8c0:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | |||
| 0003b8d0:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | |||
| 0003b8e0:·706c·6174·666f·726d·730a·6966·205b·2021··platforms.if·[·! | |||
| 0003b8f0:·202d·6620·2f2e·646f·636b·6572·656e·7620···-f·/.dockerenv· | |||
| 0003b900:·5d20·2661·6d70·3b26·616d·703b·205b·2021··]·&&·[·! | |||
| 0003b910:·202d·6620·2f72·756e·2f2e·636f·6e74·6169···-f·/run/.contai | |||
| 0003b920:·6e65·7265·6e76·205d·3b20·7468·656e·0a0a··nerenv·];·then.. | |||
| 0003b930:·6966·2021·2072·706d·202d·7120·2d2d·7175··if·!·rpm·-q·--qu | |||
| 0003b940:·6965·7420·2261·6964·6522·203b·2074·6865··iet·"aide"·;·the | |||
| 0003b950:·6e0a·2020·2020·646e·6620·696e·7374·616c··n.····dnf·instal | |||
| 0003b960:·6c20·2d79·2022·6169·6465·220a·6669·0a0a··l·-y·"aide".fi.. | |||
| 0003b970:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | |||
| 0003b980:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | |||
| 0003b990:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | |||
| 0003b9a0:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | |||
| 0003b9b0:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | |||
| 0003b9c0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b9d0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b9e0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b9f0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| Max diff block lines reached; 10115012/10147082 bytes (99.68%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Workstation | 58 | ··············Workstation |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 118, 52 lines modified | Offset 118, 26 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············6.1.1 | 123 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | -·name:·Ensure·aide·is·installed | ||
| 131 | ··package: | ||
| 132 | ····name:·aide | ||
| 133 | ····state:·present | ||
| 134 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 135 | ··tags: | ||
| 136 | ··-·CJIS-5.10.1.3 | ||
| 137 | ··-·NIST-800-53-CM-6(a) | ||
| 138 | ··-·PCI-DSS-Req-11.5 | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | ||
| 140 | ··-·enable_strategy | ||
| 141 | ··-·low_complexity | ||
| 142 | ··-·low_disruption | ||
| 143 | ··-·medium_severity | ||
| 144 | ··-·no_reboot_needed | ||
| 145 | ··-·package_aide_installed | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | include·install_aide | 130 | include·install_aide |
| 152 | class·install_aide·{ | 131 | class·install_aide·{ |
| 153 | ··package·{·'aide': | 132 | ··package·{·'aide': |
| 154 | ····ensure·=>·'installed', | 133 | ····ensure·=>·'installed', |
| 155 | ··} | 134 | ··} |
| 156 | } | 135 | } |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | #·Remediation·is·applicable·only·in·certain·platforms | 141 | #·Remediation·is·applicable·only·in·certain·platforms |
| 167 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 142 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 178, 21 lines modified | Offset 152, 47 lines modified | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 183 | package·install·aide | 157 | package·install·aide |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | package·--add=aide | 167 | package·--add=aide |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | -·name:·Ensure·aide·is·installed | ||
| 174 | ··package: | ||
| 175 | ····name:·aide | ||
| 176 | ····state:·present | ||
| 177 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 178 | ··tags: | ||
| 179 | ··-·CJIS-5.10.1.3 | ||
| 180 | ··-·NIST-800-53-CM-6(a) | ||
| 181 | ··-·PCI-DSS-Req-11.5 | ||
| 182 | ··-·PCI-DSSv4-11.5.2 | ||
| 183 | ··-·enable_strategy | ||
| 184 | ··-·low_complexity | ||
| 185 | ··-·low_disruption | ||
| 186 | ··-·medium_severity | ||
| 187 | ··-·no_reboot_needed | ||
| 188 | ··-·package_aide_installed | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 190 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 191 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 195 | To·initiate·a·manual·check,·run·the·following·command: | 194 | To·initiate·a·manual·check,·run·the·following·command: |
| 196 | $·sudo·/usr/sbin/aide·--check | 195 | $·sudo·/usr/sbin/aide·--check |
| Offset 209, 14 lines modified | Offset 209, 28 lines modified | ||
| 209 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 209 | References:·_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 210 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 210 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 212 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 212 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 213 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 213 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 214 | ············_\x8c_\x8i_\x8s············6.1.1 | 214 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| Max diff block lines reached; 1242398/1248433 bytes (99.52%) of diff not shown. | |||
| Offset 14408, 15 lines modified | Offset 14408, 15 lines modified | ||
| 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000384e0:·342d·3131·2d30·3 | 000384e0:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15210, 234 lines modified | Offset 15210, 234 lines modified | ||
| 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b6a0:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | 0003b6a0:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | ||
| 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b700:·6174·696f·6e20· | 0003b700:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | ||
| 0003b710:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b720:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b730:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b740:·7073·6522·2069·643d·2269·646d·3732·3733··pse"·id="idm7273 | |||
| 0003b750:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b760:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b770:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b780:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b790:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b7a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b7b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b7c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b7d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b7e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b7f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b800:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b810:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b820:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b830:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b840:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b850:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b860:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b870:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b880:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b890:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b8a0:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b8b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b8c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b8d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b8e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b8f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b900:·6964·6d37·3237·3422·2074·6162·696e·6465··idm7274"·tabinde | |||
| 0003b910:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b920:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b930:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b940:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b950:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b960:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b | 0003b970:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003b | 0003b980:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b990:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b9a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | ||
| 0003b | 0003b9b0:·3237·3422·3e3c·7461·626c·6520·636c·6173··274"><table·clas | ||
| 0003b | 0003b9c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b9d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b9e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b9f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003ba00:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003ba10:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003ba20:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b | 0003ba30:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003ba40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003ba50:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003ba60:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003ba70:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003ba80:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003b | 0003ba90:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003b | 0003baa0:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 0003b850:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b860:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b870:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b880:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b890:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b8a0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b8b0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b8c0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b8d0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b8e0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b8f0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b900:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b910:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b920:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b930:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b940:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b950:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b960:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b970:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b980:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b990:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b9a0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b9b0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b | 0003bab0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 0003bac0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003bad0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003bae0:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003baf0:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003bb00:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003bb10:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003bb20:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003bb30:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003bb40:·6465·2220·3b20·7468·656e·0a20·2020·2064··de"·;·then.····d | |||
| 0003bb50:·6e66·2069·6e73·7461·6c6c·202d·7920·2261··nf·install·-y·"a | |||
| 0003bb60:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003bb70:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003bb80:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003bb90:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003bba0:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003bbb0:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003bbc0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bbd0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bbe0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bbf0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bc00:·2d74·6172·6765·743d·2223·6964·6d37·3237··-target="#idm727 | |||
| Max diff block lines reached; 23481900/23513970 bytes (99.86%) of diff not shown. | |||
| Offset 14420, 15 lines modified | Offset 14420, 15 lines modified | ||
| 00038530:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038530:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038540:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038540:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038550:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038550:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038560:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038560:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038570:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038570:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038590:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00038590:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 000385a0:·2d31·312d·303 | 000385a0:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 000385b0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 000385b0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 000385c0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 000385c0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 000385d0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 000385d0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000385e0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000385e0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000385f0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000385f0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038600:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038600:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038610:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038610:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15273, 301 lines modified | Offset 15273, 301 lines modified | ||
| 0003ba80:·7461·7267·6574·3d22·2369·646d·3639·3334··target="#idm6934 | 0003ba80:·7461·7267·6574·3d22·2369·646d·3639·3334··target="#idm6934 | ||
| 0003ba90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ba90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003baa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003baa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003bab0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003bab0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003bac0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003bac0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003bad0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003bad0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003bae0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003bae0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003baf0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003bb00:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bb10:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bb20:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bb30:·2069·643d·2269·646d·3639·3334·223e·3c70···id="idm6934"><p | |||
| 0003bb40:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003bb50:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003bb60:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003bb70:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003bb80:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003bb90:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003bba0:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003bbb0:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003bbc0:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003bbd0:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003bbe0:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003bbf0:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003bc00:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003bc10:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003bc20:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003bc30:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003bc40:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003bc50:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003bc60:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003bc70:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003bc80:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003bc90:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003bca0:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003bcb0:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003bcc0:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003bcd0:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003bce0:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003bcf0:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003bd00:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003bd10:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | |||
| 0003bd20:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003bd30:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003bd40:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003bd50:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bd60:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bd70:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bd80:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003bd90:·7461·7267·6574·3d22·2369·646d·3639·3335··target="#idm6935 | |||
| 0003bda0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bdb0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bdc0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bdd0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bde0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bdf0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b | 0003be00:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003b | 0003be10:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b | 0003be20:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003be30:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003be40:·7365·2220·6964·3d22·6964·6d36·3933·3522··se"·id="idm6935" | ||
| 0003b | 0003be50:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003be60:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003be70:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003be80:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003be90:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003bea0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003b | 0003beb0:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003b | 0003bec0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b | 0003bed0:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003b | 0003bee0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003bef0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003bf00:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003bf10:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003bf20:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003b | 0003bf30:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003b | 0003bf40:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003b | 0003bf50:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003b | 0003bf60:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003b | 0003bf70:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003b | 0003bf80:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003b | 0003bf90:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003b | 0003bfa0:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003b | 0003bfb0:·6d64·3a20·646e·6620·7265·696e·7374·616c··md:·dnf·reinstal | ||
| 0003b | 0003bfc0:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | ||
| 0003b | 0003bfd0:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003b | 0003bfe0:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003b | 0003bff0:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003 | 0003c000:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003 | 0003c010:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003 | 0003c020:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003 | 0003c030:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003 | 0003c040:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003 | 0003c050:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003 | 0003c060:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003 | 0003c070:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003 | 0003c080:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003 | 0003c090:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003 | 0003c0a0:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003 | 0003c0b0:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003 | 0003c0c0:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003 | 0003c0d0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003 | 0003c0e0:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003 | 0003c0f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003 | 0003c100:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003 | 0003c110:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003 | 0003c120:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003 | 0003c130:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003 | 0003c140:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003 | 0003c150:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003 | 0003c160:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| Max diff block lines reached; 6290059/6315781 bytes (99.59%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:10 | 63 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 64 | ····*·cpe:/o:centos:centos:10 | 64 | ····*·cpe:/o:centos:centos:10 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 122, 14 lines modified | Offset 122, 27 lines modified | ||
| 122 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 122 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 123 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 123 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 124 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 124 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 125 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 125 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 127 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 131 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 132 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 133 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 134 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 135 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 136 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 134 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 142 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 135 | ··set_fact: | 143 | ··set_fact: |
| Offset 256, 27 lines modified | Offset 269, 14 lines modified | ||
| 256 | ··-·PCI-DSSv4-11.5.2 | 269 | ··-·PCI-DSSv4-11.5.2 |
| 257 | ··-·high_complexity | 270 | ··-·high_complexity |
| 258 | ··-·high_severity | 271 | ··-·high_severity |
| 259 | ··-·medium_disruption | 272 | ··-·medium_disruption |
| 260 | ··-·no_reboot_needed | 273 | ··-·no_reboot_needed |
| 261 | ··-·restrict_strategy | 274 | ··-·restrict_strategy |
| 262 | ··-·rpm_verify_hashes | 275 | ··-·rpm_verify_hashes |
| 263 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 264 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 265 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 266 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 267 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 268 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 269 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 270 | fi | ||
| 271 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 276 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 272 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 277 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 273 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 278 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 274 | run·the·following·command·to·determine·which·package·owns·it: | 279 | run·the·following·command·to·determine·which·package·owns·it: |
| 275 | $·rpm·-qf·FILENAME | 280 | $·rpm·-qf·FILENAME |
| 276 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 281 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 277 | $·sudo·rpm·--setugids·PACKAGENAME | 282 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 295, 14 lines modified | Offset 295, 40 lines modified | ||
| 295 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 295 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 296 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 296 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 297 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 297 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 298 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 298 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 299 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 299 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 300 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 300 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 301 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 301 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 303 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 304 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 305 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 306 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 307 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 308 | declare·-A·SETPERMS_RPM_DICT | ||
| 309 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 310 | #·is·expected·by·the·RPM·database | ||
| 311 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 312 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 313 | do | ||
| 314 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 315 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 316 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 317 | done | ||
| 318 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 319 | #·correct·values | ||
| 320 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 321 | do | ||
| 322 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 323 | done | ||
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 303 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 325 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 304 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 326 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 305 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 327 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 306 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 328 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 307 | -·name:·Read·list·of·files·with·incorrect·ownership | 329 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 308 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 330 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 377, 40 lines modified | Offset 403, 14 lines modified | ||
| 377 | ··-·PCI-DSSv4-11.5.2 | 403 | ··-·PCI-DSSv4-11.5.2 |
| 378 | ··-·high_complexity | 404 | ··-·high_complexity |
| 379 | ··-·high_severity | 405 | ··-·high_severity |
| 380 | ··-·medium_disruption | 406 | ··-·medium_disruption |
| 381 | ··-·no_reboot_needed | 407 | ··-·no_reboot_needed |
| 382 | ··-·restrict_strategy | 408 | ··-·restrict_strategy |
| 383 | ··-·rpm_verify_ownership | 409 | ··-·rpm_verify_ownership |
| 384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 385 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 386 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 387 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 388 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 389 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 664816/672530 bytes (98.85%) of diff not shown. | |||
| Offset 14439, 15 lines modified | Offset 14439, 15 lines modified | ||
| 00038660:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038660:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038670:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038670:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038680:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038680:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038690:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038690:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000386a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000386a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000386b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000386b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000386c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000386c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000386d0:·7320·6f66·2032·3032·342d·3131·2d30·3 | 000386d0:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 000386e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000386e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000386f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000386f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038700:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038700:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038710:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038710:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038720:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038720:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038730:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038730:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038740:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038740:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15294, 300 lines modified | Offset 15294, 300 lines modified | ||
| 0003bbd0:·6765·743d·2223·6964·6d36·3933·3422·2074··get="#idm6934"·t | 0003bbd0:·6765·743d·2223·6964·6d36·3933·3422·2074··get="#idm6934"·t | ||
| 0003bbe0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bbe0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003bbf0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003bbf0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003bc00:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003bc00:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003bc10:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003bc10:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003bc20:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003bc20:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003bc30:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003bc30:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003bc40:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003bc50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bc60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bc70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bc80:·3d22·6964·6d36·3933·3422·3e3c·7072·653e··="idm6934"><pre> | |||
| 0003bc90:·3c63·6f64·653e·0a23·2046·696e·6420·7768··<code>.#·Find·wh | |||
| 0003bca0:·6963·6820·6669·6c65·7320·6861·7665·2069··ich·files·have·i | |||
| 0003bcb0:·6e63·6f72·7265·6374·2068·6173·6820·286e··ncorrect·hash·(n | |||
| 0003bcc0:·6f74·2069·6e20·2f65·7463·2c20·6265·6361··ot·in·/etc,·beca | |||
| 0003bcd0:·7573·6520·6f66·2074·6865·2073·7973·7465··use·of·the·syste | |||
| 0003bce0:·6d20·7265·6c61·7465·6420·636f·6e66·6967··m·related·config | |||
| 0003bcf0:·2066·696c·6573·2920·616e·6420·7468·656e···files)·and·then | |||
| 0003bd00:·2067·6574·2066·696c·6573·206e·616d·6573···get·files·names | |||
| 0003bd10:·0a66·696c·6573·5f77·6974·685f·696e·636f··.files_with_inco | |||
| 0003bd20:·7272·6563·745f·6861·7368·3d22·2428·7270··rrect_hash="$(rp | |||
| 0003bd30:·6d20·2d56·6120·2d2d·6e6f·636f·6e66·6967··m·-Va·--noconfig | |||
| 0003bd40:·207c·2067·7265·7020·2d45·2027·5e2e·2e35···|·grep·-E·'^..5 | |||
| 0003bd50:·2720·7c20·6177·6b20·277b·7072·696e·7420··'·|·awk·'{print· | |||
| 0003bd60:·244e·467d·2720·2922·0a0a·6966·205b·202d··$NF}'·)"..if·[·- | |||
| 0003bd70:·6e20·2224·6669·6c65·735f·7769·7468·5f69··n·"$files_with_i | |||
| 0003bd80:·6e63·6f72·7265·6374·5f68·6173·6822·205d··ncorrect_hash"·] | |||
| 0003bd90:·3b20·7468·656e·0a20·2020·2023·2046·726f··;·then.····#·Fro | |||
| 0003bda0:·6d20·6669·6c65·7320·6e61·6d65·7320·6765··m·files·names·ge | |||
| 0003bdb0:·7420·7061·636b·6167·6520·6e61·6d65·7320··t·package·names· | |||
| 0003bdc0:·616e·6420·6368·616e·6765·206e·6577·6c69··and·change·newli | |||
| 0003bdd0:·6e65·2074·6f20·7370·6163·652c·2062·6563··ne·to·space,·bec | |||
| 0003bde0:·6175·7365·2072·706d·2077·7269·7465·7320··ause·rpm·writes· | |||
| 0003bdf0:·6561·6368·2070·6163·6b61·6765·2074·6f20··each·package·to· | |||
| 0003be00:·6e65·7720·6c69·6e65·0a20·2020·2070·6163··new·line.····pac | |||
| 0003be10:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003be20:·6c6c·3d22·2428·7270·6d20·2d71·6620·2466··ll="$(rpm·-qf·$f | |||
| 0003be30:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003be40:·6563·745f·6861·7368·207c·2074·7220·275c··ect_hash·|·tr·'\ | |||
| 0003be50:·6e27·2027·2027·2922·0a0a·2020·2020·0a20··n'·'·')"..····.· | |||
| 0003be60:·2020·2064·6e66·2072·6569·6e73·7461·6c6c·····dnf·reinstall | |||
| 0003be70:·202d·7920·2470·6163·6b61·6765·735f·746f···-y·$packages_to | |||
| 0003be80:·5f72·6569·6e73·7461·6c6c·0a20·2020·200a··_reinstall.····. | |||
| 0003be90:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003bea0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003beb0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bec0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bed0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bee0:·6765·743d·2223·6964·6d36·3933·3522·2074··get="#idm6935"·t | |||
| 0003bef0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003bf00:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bf10:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bf20:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bf30:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003bf40:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b | 0003bf50:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003b | 0003bf60:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003bf70:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003bf80:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003bf90:·2069·643d·2269·646d·3639·3335·223e·3c74···id="idm6935"><t | ||
| 0003b | 0003bfa0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b | 0003bfb0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b | 0003bfc0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b | 0003bfd0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b | 0003bfe0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b | 0003bff0:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003 | 0003c000:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003 | 0003c010:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003 | 0003c020:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003 | 0003c030:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003 | 0003c040:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003 | 0003c050:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003 | 0003c060:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003 | 0003c070:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003 | 0003c080:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003 | 0003c090:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003 | 0003c0a0:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | ||
| 0003 | 0003c0b0:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | ||
| 0003 | 0003c0c0:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | ||
| 0003 | 0003c0d0:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | ||
| 0003 | 0003c0e0:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | ||
| 0003 | 0003c0f0:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | ||
| 0003 | 0003c100:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | ||
| 0003 | 0003c110:·790a·2020·7768·656e·3a20·616e·7369·626c··y.··when:·ansibl | ||
| 0003 | 0003c120:·655f·6469·7374·7269·6275·7469·6f6e·2069··e_distribution·i | ||
| 0003 | 0003c130:·6e20·5b20·2246·6564·6f72·6122·2c20·2252··n·[·"Fedora",·"R | ||
| 0003 | 0003c140:·6564·4861·7422·2c20·2243·656e·744f·5322··edHat",·"CentOS" | ||
| 0003 | 0003c150:·2c20·224f·7261·636c·654c·696e·7578·2220··,·"OracleLinux"· | ||
| 0003 | 0003c160:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | ||
| 0003 | 0003c170:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003 | 0003c180:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003 | 0003c190:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003 | 0003c1a0:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003 | 0003c1b0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003 | 0003c1c0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003 | 0003c1d0:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003 | 0003c1e0:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003 | 0003c1f0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003 | 0003c200:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003 | 0003c210:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003 | 0003c220:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003 | 0003c230:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003 | 0003c240:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003 | 0003c250:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003 | 0003c260:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003 | 0003c270:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003 | 0003c280:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003 | 0003c290:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003 | 0003c2a0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003 | 0003c2b0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| Max diff block lines reached; 19562558/19588280 bytes (99.87%) of diff not shown. | |||
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ··············(HIPAA) | 66 | ··············(HIPAA) |
| 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 68 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 68 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 69 | ····*·cpe:/o:redhat:enterprise_linux:10 | 69 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 70 | ····*·cpe:/o:centos:centos:10 | 70 | ····*·cpe:/o:centos:centos:10 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 76 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 77 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 77 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 78 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 78 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 79 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 79 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 80 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 80 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 128, 14 lines modified | Offset 128, 27 lines modified | ||
| 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 137 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 138 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 139 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 140 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 141 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 142 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 140 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 148 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 141 | ··set_fact: | 149 | ··set_fact: |
| Offset 262, 27 lines modified | Offset 275, 14 lines modified | ||
| 262 | ··-·PCI-DSSv4-11.5.2 | 275 | ··-·PCI-DSSv4-11.5.2 |
| 263 | ··-·high_complexity | 276 | ··-·high_complexity |
| 264 | ··-·high_severity | 277 | ··-·high_severity |
| 265 | ··-·medium_disruption | 278 | ··-·medium_disruption |
| 266 | ··-·no_reboot_needed | 279 | ··-·no_reboot_needed |
| 267 | ··-·restrict_strategy | 280 | ··-·restrict_strategy |
| 268 | ··-·rpm_verify_hashes | 281 | ··-·rpm_verify_hashes |
| 269 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 270 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 271 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 272 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 273 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 274 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 275 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 276 | fi | ||
| 277 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 282 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 278 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 283 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 279 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 284 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 280 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 285 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 281 | $·rpm·-qf·FILENAME | 286 | $·rpm·-qf·FILENAME |
| 282 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 287 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 303, 14 lines modified | Offset 303, 44 lines modified | ||
| 303 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 303 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 304 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 304 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 305 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 305 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 306 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 306 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 308 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 308 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 310 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 311 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 312 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 313 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 314 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 315 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 316 | declare·-A·SETPERMS_RPM_DICT | ||
| 317 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 318 | #·is·expected·by·the·RPM·database | ||
| 319 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 320 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 321 | do | ||
| 322 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 323 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 324 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 325 | ········do | ||
| 326 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 327 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 328 | ········done | ||
| 329 | done | ||
| 330 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 331 | #·correct·values | ||
| 332 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 333 | do | ||
| 334 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 335 | done | ||
| 310 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 311 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 312 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 313 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 314 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 315 | -·name:·Read·list·of·files·with·incorrect·permissions | 341 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 316 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 342 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 388, 44 lines modified | Offset 418, 14 lines modified | ||
| 388 | ··-·PCI-DSSv4-11.5.2 | 418 | ··-·PCI-DSSv4-11.5.2 |
| 389 | ··-·high_complexity | 419 | ··-·high_complexity |
| 390 | ··-·high_severity | 420 | ··-·high_severity |
| 391 | ··-·medium_disruption | 421 | ··-·medium_disruption |
| 392 | ··-·no_reboot_needed | 422 | ··-·no_reboot_needed |
| 393 | ··-·restrict_strategy | 423 | ··-·restrict_strategy |
| 394 | ··-·rpm_verify_permissions | 424 | ··-·rpm_verify_permissions |
| 395 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 396 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 397 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1641380/1649530 bytes (99.51%) of diff not shown. | |||
| Offset 14427, 15 lines modified | Offset 14427, 15 lines modified | ||
| 000385a0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 000385a0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 000385b0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 000385b0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 000385c0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 000385c0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000385d0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000385d0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000385e0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000385e0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000385f0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000385f0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038600:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038600:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038610:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00038610:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00038620:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038620:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038630:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038630:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038640:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038640:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038650:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038650:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038660:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038660:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038670:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038670:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038680:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038680:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15317, 301 lines modified | Offset 15317, 301 lines modified | ||
| 0003bd40:·2d74·6172·6765·743d·2223·6964·6d36·3933··-target="#idm693 | 0003bd40:·2d74·6172·6765·743d·2223·6964·6d36·3933··-target="#idm693 | ||
| 0003bd50:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | 0003bd50:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | ||
| 0003bd60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003bd60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003bd70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003bd70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003bd80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003bd80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bd90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003bd90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bda0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003bda0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bdb0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003bdc0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bdd0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bde0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bdf0:·2220·6964·3d22·6964·6d36·3933·3422·3e3c··"·id="idm6934">< | |||
| 0003be00:·7072·653e·3c63·6f64·653e·0a23·2046·696e··pre><code>.#·Fin | |||
| 0003be10:·6420·7768·6963·6820·6669·6c65·7320·6861··d·which·files·ha | |||
| 0003be20:·7665·2069·6e63·6f72·7265·6374·2068·6173··ve·incorrect·has | |||
| 0003be30:·6820·286e·6f74·2069·6e20·2f65·7463·2c20··h·(not·in·/etc,· | |||
| 0003be40:·6265·6361·7573·6520·6f66·2074·6865·2073··because·of·the·s | |||
| 0003be50:·7973·7465·6d20·7265·6c61·7465·6420·636f··ystem·related·co | |||
| 0003be60:·6e66·6967·2066·696c·6573·2920·616e·6420··nfig·files)·and· | |||
| 0003be70:·7468·656e·2067·6574·2066·696c·6573·206e··then·get·files·n | |||
| 0003be80:·616d·6573·0a66·696c·6573·5f77·6974·685f··ames.files_with_ | |||
| 0003be90:·696e·636f·7272·6563·745f·6861·7368·3d22··incorrect_hash=" | |||
| 0003bea0:·2428·7270·6d20·2d56·6120·2d2d·6e6f·636f··$(rpm·-Va·--noco | |||
| 0003beb0:·6e66·6967·207c·2067·7265·7020·2d45·2027··nfig·|·grep·-E·' | |||
| 0003bec0:·5e2e·2e35·2720·7c20·6177·6b20·277b·7072··^..5'·|·awk·'{pr | |||
| 0003bed0:·696e·7420·244e·467d·2720·2922·0a0a·6966··int·$NF}'·)"..if | |||
| 0003bee0:·205b·202d·6e20·2224·6669·6c65·735f·7769···[·-n·"$files_wi | |||
| 0003bef0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003bf00:·6822·205d·3b20·7468·656e·0a20·2020·2023··h"·];·then.····# | |||
| 0003bf10:·2046·726f·6d20·6669·6c65·7320·6e61·6d65···From·files·name | |||
| 0003bf20:·7320·6765·7420·7061·636b·6167·6520·6e61··s·get·package·na | |||
| 0003bf30:·6d65·7320·616e·6420·6368·616e·6765·206e··mes·and·change·n | |||
| 0003bf40:·6577·6c69·6e65·2074·6f20·7370·6163·652c··ewline·to·space, | |||
| 0003bf50:·2062·6563·6175·7365·2072·706d·2077·7269···because·rpm·wri | |||
| 0003bf60:·7465·7320·6561·6368·2070·6163·6b61·6765··tes·each·package | |||
| 0003bf70:·2074·6f20·6e65·7720·6c69·6e65·0a20·2020···to·new·line.··· | |||
| 0003bf80:·2070·6163·6b61·6765·735f·746f·5f72·6569···packages_to_rei | |||
| 0003bf90:·6e73·7461·6c6c·3d22·2428·7270·6d20·2d71··nstall="$(rpm·-q | |||
| 0003bfa0:·6620·2466·696c·6573·5f77·6974·685f·696e··f·$files_with_in | |||
| 0003bfb0:·636f·7272·6563·745f·6861·7368·207c·2074··correct_hash·|·t | |||
| 0003bfc0:·7220·275c·6e27·2027·2027·2922·0a0a·2020··r·'\n'·'·')"..·· | |||
| 0003bfd0:·2020·0a20·2020·2064·6e66·2072·6569·6e73····.····dnf·reins | |||
| 0003bfe0:·7461·6c6c·202d·7920·2470·6163·6b61·6765··tall·-y·$package | |||
| 0003bff0:·735f·746f·5f72·6569·6e73·7461·6c6c·0a20··s_to_reinstall.· | |||
| 0003c000:·2020·200a·6669·0a3c·2f63·6f64·653e·3c2f·····.fi.</code></ | |||
| 0003c010:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003c020:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003c030:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003c040:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003c050:·2d74·6172·6765·743d·2223·6964·6d36·3933··-target="#idm693 | |||
| 0003c060:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | |||
| 0003c070:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003c080:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003c090:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003c0a0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003c0b0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003 | 0003c0c0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003 | 0003c0d0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003 | 0003c0e0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003 | 0003c0f0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003 | 0003c100:·7073·6522·2069·643d·2269·646d·3639·3335··pse"·id="idm6935 | ||
| 0003 | 0003c110:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003 | 0003c120:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003 | 0003c130:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003 | 0003c140:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003 | 0003c150:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003 | 0003c160:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003 | 0003c170:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003 | 0003c180:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003 | 0003c190:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003 | 0003c1a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003 | 0003c1b0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003 | 0003c1c0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003 | 0003c1d0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003 | 0003c1e0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003 | 0003c1f0:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003 | 0003c200:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003 | 0003c210:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | ||
| 0003 | 0003c220:·743a·2050·6163·6b61·6765·206d·616e·6167··t:·Package·manag | ||
| 0003 | 0003c230:·6572·2072·6569·6e73·7461·6c6c·2063·6f6d··er·reinstall·com | ||
| 0003 | 0003c240:·6d61·6e64·270a·2020·7365·745f·6661·6374··mand'.··set_fact | ||
| 0003 | 0003c250:·3a0a·2020·2020·7061·636b·6167·655f·6d61··:.····package_ma | ||
| 0003 | 0003c260:·6e61·6765·725f·7265·696e·7374·616c·6c5f··nager_reinstall_ | ||
| 0003 | 0003c270:·636d·643a·2064·6e66·2072·6569·6e73·7461··cmd:·dnf·reinsta | ||
| 0003 | 0003c280:·6c6c·202d·790a·2020·7768·656e·3a20·616e··ll·-y.··when:·an | ||
| 0003 | 0003c290:·7369·626c·655f·6469·7374·7269·6275·7469··sible_distributi | ||
| 0003 | 0003c2a0:·6f6e·2069·6e20·5b20·2246·6564·6f72·6122··on·in·[·"Fedora" | ||
| 0003 | 0003c2b0:·2c20·2252·6564·4861·7422·2c20·2243·656e··,·"RedHat",·"Cen | ||
| 0003 | 0003c2c0:·744f·5322·2c20·224f·7261·636c·654c·696e··tOS",·"OracleLin | ||
| 0003 | 0003c2d0:·7578·2220·5d0a·2020·7461·6773·3a0a·2020··ux"·].··tags:.·· | ||
| 0003 | 0003c2e0:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003 | 0003c2f0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003 | 0003c300:·2d33·2e33·2e38·0a20·202d·204e·4953·542d··-3.3.8.··-·NIST- | ||
| 0003c | 0003c310:·3830·302d·3137·312d·332e·342e·310a·2020··800-171-3.4.1.·· | ||
| 0003c | 0003c320:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 0003c | 0003c330:·2d39·2833·290a·2020·2d20·4e49·5354·2d38··-9(3).··-·NIST-8 | ||
| 0003c | 0003c340:·3030·2d35·332d·434d·2d36·2863·290a·2020··00-53-CM-6(c).·· | ||
| 0003c | 0003c350:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003c | 0003c360:·2d36·2864·290a·2020·2d20·4e49·5354·2d38··-6(d).··-·NIST-8 | ||
| 0003c | 0003c370:·3030·2d35·332d·5349·2d37·0a20·202d·204e··00-53-SI-7.··-·N | ||
| 0003c | 0003c380:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003c | 0003c390:·3129·0a20·202d·204e·4953·542d·3830·302d··1).··-·NIST-800- | ||
| 0003c | 0003c3a0:·3533·2d53·492d·3728·3629·0a20·202d·2050··53-SI-7(6).··-·P | ||
| 0003c | 0003c3b0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003c | 0003c3c0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003c | 0003c3d0:·2e35·2e32·0a20·202d·2068·6967·685f·636f··.5.2.··-·high_co | ||
| 0003c | 0003c3e0:·6d70·6c65·7869·7479·0a20·202d·2068·6967··mplexity.··-·hig | ||
| 0003c | 0003c3f0:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | ||
| 0003c | 0003c400:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | ||
| 0003c | 0003c410:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003c | 0003c420:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | ||
| Max diff block lines reached; 10855735/10881457 bytes (99.76%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ··············Base | 63 | ··············Base |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:10 | 66 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 67 | ····*·cpe:/o:centos:centos:10 | 67 | ····*·cpe:/o:centos:centos:10 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 132, 14 lines modified | Offset 132, 27 lines modified | ||
| 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 141 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 142 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 143 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 144 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 145 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 146 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 144 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 152 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 145 | ··set_fact: | 153 | ··set_fact: |
| Offset 266, 27 lines modified | Offset 279, 14 lines modified | ||
| 266 | ··-·PCI-DSSv4-11.5.2 | 279 | ··-·PCI-DSSv4-11.5.2 |
| 267 | ··-·high_complexity | 280 | ··-·high_complexity |
| 268 | ··-·high_severity | 281 | ··-·high_severity |
| 269 | ··-·medium_disruption | 282 | ··-·medium_disruption |
| 270 | ··-·no_reboot_needed | 283 | ··-·no_reboot_needed |
| 271 | ··-·restrict_strategy | 284 | ··-·restrict_strategy |
| 272 | ··-·rpm_verify_hashes | 285 | ··-·rpm_verify_hashes |
| 273 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 274 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 275 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 276 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 277 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 278 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 279 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 280 | fi | ||
| 281 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 286 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 282 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 287 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 283 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 288 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 284 | run·the·following·command·to·determine·which·package·owns·it: | 289 | run·the·following·command·to·determine·which·package·owns·it: |
| 285 | $·rpm·-qf·FILENAME | 290 | $·rpm·-qf·FILENAME |
| 286 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 291 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 287 | $·sudo·rpm·--setugids·PACKAGENAME | 292 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 305, 14 lines modified | Offset 305, 40 lines modified | ||
| 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 306 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 306 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 311 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 311 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 317 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 318 | declare·-A·SETPERMS_RPM_DICT | ||
| 319 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 320 | #·is·expected·by·the·RPM·database | ||
| 321 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 322 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 323 | do | ||
| 324 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 325 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 326 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 327 | done | ||
| 328 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 329 | #·correct·values | ||
| 330 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 331 | do | ||
| 332 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 333 | done | ||
| 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 317 | -·name:·Read·list·of·files·with·incorrect·ownership | 339 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 318 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 340 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 387, 40 lines modified | Offset 413, 14 lines modified | ||
| 387 | ··-·PCI-DSSv4-11.5.2 | 413 | ··-·PCI-DSSv4-11.5.2 |
| 388 | ··-·high_complexity | 414 | ··-·high_complexity |
| 389 | ··-·high_severity | 415 | ··-·high_severity |
| 390 | ··-·medium_disruption | 416 | ··-·medium_disruption |
| 391 | ··-·no_reboot_needed | 417 | ··-·no_reboot_needed |
| 392 | ··-·restrict_strategy | 418 | ··-·restrict_strategy |
| 393 | ··-·rpm_verify_ownership | 419 | ··-·rpm_verify_ownership |
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 399 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1171574/1179204 bytes (99.35%) of diff not shown. | |||
| Offset 14431, 15 lines modified | Offset 14431, 15 lines modified | ||
| 000385e0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000385e0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 000385f0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 000385f0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038600:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038600:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038610:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038610:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038620:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038620:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038630:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038630:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038640:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038640:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038650:·206f·6620·3230·3234·2d31·312d·303 | 00038650:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00038660:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038660:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038670:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038670:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038680:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038680:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038690:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038690:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000386a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000386a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000386b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000386b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000386c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000386c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15321, 301 lines modified | Offset 15321, 301 lines modified | ||
| 0003bd80:·7461·7267·6574·3d22·2369·646d·3639·3334··target="#idm6934 | 0003bd80:·7461·7267·6574·3d22·2369·646d·3639·3334··target="#idm6934 | ||
| 0003bd90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003bd90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003bda0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003bda0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003bdb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003bdb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003bdc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003bdc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003bdd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003bdd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003bde0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003bde0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003bdf0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003be00:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003be10:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003be20:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003be30:·2069·643d·2269·646d·3639·3334·223e·3c70···id="idm6934"><p | |||
| 0003be40:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003be50:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003be60:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003be70:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003be80:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003be90:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003bea0:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003beb0:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003bec0:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003bed0:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003bee0:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003bef0:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003bf00:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003bf10:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003bf20:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003bf30:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003bf40:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003bf50:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003bf60:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003bf70:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003bf80:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003bf90:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003bfa0:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003bfb0:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003bfc0:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003bfd0:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003bfe0:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003bff0:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003c000:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003c010:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | |||
| 0003c020:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003c030:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003c040:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003c050:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c060:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c070:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c080:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c090:·7461·7267·6574·3d22·2369·646d·3639·3335··target="#idm6935 | |||
| 0003c0a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c0b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c0c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c0d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c0e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c0f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003 | 0003c100:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003 | 0003c110:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003 | 0003c120:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003 | 0003c130:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003 | 0003c140:·7365·2220·6964·3d22·6964·6d36·3933·3522··se"·id="idm6935" | ||
| 0003 | 0003c150:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003 | 0003c160:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003 | 0003c170:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003 | 0003c180:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003 | 0003c190:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003 | 0003c1a0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003 | 0003c1b0:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003 | 0003c1c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003 | 0003c1d0:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003 | 0003c1e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 0003c1f0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003 | 0003c200:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003 | 0003c210:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003 | 0003c220:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003 | 0003c230:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003 | 0003c240:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003 | 0003c250:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003 | 0003c260:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003 | 0003c270:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003 | 0003c280:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003 | 0003c290:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003 | 0003c2a0:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003 | 0003c2b0:·6d64·3a20·646e·6620·7265·696e·7374·616c··md:·dnf·reinstal | ||
| 0003 | 0003c2c0:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | ||
| 0003 | 0003c2d0:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003 | 0003c2e0:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003 | 0003c2f0:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003 | 0003c300:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003c | 0003c310:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003c | 0003c320:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003c | 0003c330:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003c | 0003c340:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003c | 0003c350:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003c | 0003c360:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003c | 0003c370:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003c | 0003c380:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003c | 0003c390:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c | 0003c3a0:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003c | 0003c3b0:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003c | 0003c3c0:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003c | 0003c3d0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c | 0003c3e0:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003c | 0003c3f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003c | 0003c400:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003c | 0003c410:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003c | 0003c420:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003c | 0003c430:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003c | 0003c440:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003c | 0003c450:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003c | 0003c460:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| Max diff block lines reached; 10855942/10881664 bytes (99.76%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ··············Secret | 64 | ··············Secret |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 76 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 133, 14 lines modified | Offset 133, 27 lines modified | ||
| 133 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 133 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 134 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 134 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 142 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 143 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 144 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 145 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 146 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 147 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 145 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 153 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 146 | ··set_fact: | 154 | ··set_fact: |
| Offset 267, 27 lines modified | Offset 280, 14 lines modified | ||
| 267 | ··-·PCI-DSSv4-11.5.2 | 280 | ··-·PCI-DSSv4-11.5.2 |
| 268 | ··-·high_complexity | 281 | ··-·high_complexity |
| 269 | ··-·high_severity | 282 | ··-·high_severity |
| 270 | ··-·medium_disruption | 283 | ··-·medium_disruption |
| 271 | ··-·no_reboot_needed | 284 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 285 | ··-·restrict_strategy |
| 273 | ··-·rpm_verify_hashes | 286 | ··-·rpm_verify_hashes |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 276 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 277 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 278 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 279 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 280 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 281 | fi | ||
| 282 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 287 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 283 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 288 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 284 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 289 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 285 | run·the·following·command·to·determine·which·package·owns·it: | 290 | run·the·following·command·to·determine·which·package·owns·it: |
| 286 | $·rpm·-qf·FILENAME | 291 | $·rpm·-qf·FILENAME |
| 287 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 292 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 288 | $·sudo·rpm·--setugids·PACKAGENAME | 293 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 306, 14 lines modified | Offset 306, 40 lines modified | ||
| 306 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 306 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 307 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 307 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 308 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 308 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 309 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 309 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 310 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 310 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 311 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 311 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 312 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 312 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 318 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 319 | declare·-A·SETPERMS_RPM_DICT | ||
| 320 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 321 | #·is·expected·by·the·RPM·database | ||
| 322 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 323 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 324 | do | ||
| 325 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 326 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 327 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 328 | done | ||
| 329 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 330 | #·correct·values | ||
| 331 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 332 | do | ||
| 333 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 334 | done | ||
| 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 336 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 337 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 338 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 339 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 318 | -·name:·Read·list·of·files·with·incorrect·ownership | 340 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 319 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 341 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 388, 40 lines modified | Offset 414, 14 lines modified | ||
| 388 | ··-·PCI-DSSv4-11.5.2 | 414 | ··-·PCI-DSSv4-11.5.2 |
| 389 | ··-·high_complexity | 415 | ··-·high_complexity |
| 390 | ··-·high_severity | 416 | ··-·high_severity |
| 391 | ··-·medium_disruption | 417 | ··-·medium_disruption |
| 392 | ··-·no_reboot_needed | 418 | ··-·no_reboot_needed |
| 393 | ··-·restrict_strategy | 419 | ··-·restrict_strategy |
| 394 | ··-·rpm_verify_ownership | 420 | ··-·rpm_verify_ownership |
| 395 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 396 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 397 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 398 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 399 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 400 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1171574/1179213 bytes (99.35%) of diff not shown. | |||
| Offset 14429, 15 lines modified | Offset 14429, 15 lines modified | ||
| 000385c0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 000385c0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 000385d0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 000385d0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 000385e0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 000385e0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 000385f0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 000385f0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038600:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038600:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038610:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038610:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038620:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00038620:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00038630:·2d31·312d·303 | 00038630:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00038640:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038640:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038650:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038650:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038660:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038660:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038670:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038670:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038680:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038680:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038690:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038690:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000386a0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000386a0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15318, 301 lines modified | Offset 15318, 301 lines modified | ||
| 0003bd50:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003bd50:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003bd60:·2369·646d·3639·3334·2220·7461·6269·6e64··#idm6934"·tabind | 0003bd60:·2369·646d·3639·3334·2220·7461·6269·6e64··#idm6934"·tabind | ||
| 0003bd70:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003bd70:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003bd80:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003bd80:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003bd90:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003bd90:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003bda0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003bda0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003bdb0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003bdb0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003bdc0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003bdd0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003bde0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bdf0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003be00:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003be10:·3639·3334·223e·3c70·7265·3e3c·636f·6465··6934"><pre><code | |||
| 0003be20:·3e0a·2320·4669·6e64·2077·6869·6368·2066··>.#·Find·which·f | |||
| 0003be30:·696c·6573·2068·6176·6520·696e·636f·7272··iles·have·incorr | |||
| 0003be40:·6563·7420·6861·7368·2028·6e6f·7420·696e··ect·hash·(not·in | |||
| 0003be50:·202f·6574·632c·2062·6563·6175·7365·206f···/etc,·because·o | |||
| 0003be60:·6620·7468·6520·7379·7374·656d·2072·656c··f·the·system·rel | |||
| 0003be70:·6174·6564·2063·6f6e·6669·6720·6669·6c65··ated·config·file | |||
| 0003be80:·7329·2061·6e64·2074·6865·6e20·6765·7420··s)·and·then·get· | |||
| 0003be90:·6669·6c65·7320·6e61·6d65·730a·6669·6c65··files·names.file | |||
| 0003bea0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003beb0:·5f68·6173·683d·2224·2872·706d·202d·5661··_hash="$(rpm·-Va | |||
| 0003bec0:·202d·2d6e·6f63·6f6e·6669·6720·7c20·6772···--noconfig·|·gr | |||
| 0003bed0:·6570·202d·4520·275e·2e2e·3527·207c·2061··ep·-E·'^..5'·|·a | |||
| 0003bee0:·776b·2027·7b70·7269·6e74·2024·4e46·7d27··wk·'{print·$NF}' | |||
| 0003bef0:·2029·220a·0a69·6620·5b20·2d6e·2022·2466···)"..if·[·-n·"$f | |||
| 0003bf00:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003bf10:·6563·745f·6861·7368·2220·5d3b·2074·6865··ect_hash"·];·the | |||
| 0003bf20:·6e0a·2020·2020·2320·4672·6f6d·2066·696c··n.····#·From·fil | |||
| 0003bf30:·6573·206e·616d·6573·2067·6574·2070·6163··es·names·get·pac | |||
| 0003bf40:·6b61·6765·206e·616d·6573·2061·6e64·2063··kage·names·and·c | |||
| 0003bf50:·6861·6e67·6520·6e65·776c·696e·6520·746f··hange·newline·to | |||
| 0003bf60:·2073·7061·6365·2c20·6265·6361·7573·6520···space,·because· | |||
| 0003bf70:·7270·6d20·7772·6974·6573·2065·6163·6820··rpm·writes·each· | |||
| 0003bf80:·7061·636b·6167·6520·746f·206e·6577·206c··package·to·new·l | |||
| 0003bf90:·696e·650a·2020·2020·7061·636b·6167·6573··ine.····packages | |||
| 0003bfa0:·5f74·6f5f·7265·696e·7374·616c·6c3d·2224··_to_reinstall="$ | |||
| 0003bfb0:·2872·706d·202d·7166·2024·6669·6c65·735f··(rpm·-qf·$files_ | |||
| 0003bfc0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003bfd0:·6173·6820·7c20·7472·2027·5c6e·2720·2720··ash·|·tr·'\n'·'· | |||
| 0003bfe0:·2729·220a·0a20·2020·200a·2020·2020·646e··')"..····.····dn | |||
| 0003bff0:·6620·7265·696e·7374·616c·6c20·2d79·2024··f·reinstall·-y·$ | |||
| 0003c000:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003c010:·7374·616c·6c0a·2020·2020·0a66·690a·3c2f··stall.····.fi.</ | |||
| 0003c020:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003c030:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003c040:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003c050:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003c060:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003c070:·2369·646d·3639·3335·2220·7461·6269·6e64··#idm6935"·tabind | |||
| 0003c080:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c090:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c0a0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c0b0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c0c0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003 | 0003c0d0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003 | 0003c0e0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003 | 0003c0f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003 | 0003c100:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003 | 0003c110:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003 | 0003c120:·6964·6d36·3933·3522·3e3c·7461·626c·6520··idm6935"><table· | ||
| 0003 | 0003c130:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003 | 0003c140:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003 | 0003c150:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003 | 0003c160:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003 | 0003c170:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003 | 0003c180:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | ||
| 0003 | 0003c190:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003 | 0003c1a0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003 | 0003c1b0:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003 | 0003c1c0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003 | 0003c1d0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003 | 0003c1e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003 | 0003c1f0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003 | 0003c200:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003 | 0003c210:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003 | 0003c220:·3e3c·636f·6465·3e2d·206e·616d·653a·2027··><code>-·name:·' | ||
| 0003 | 0003c230:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| 0003 | 0003c240:·6520·6d61·6e61·6765·7220·7265·696e·7374··e·manager·reinst | ||
| 0003 | 0003c250:·616c·6c20·636f·6d6d·616e·6427·0a20·2073··all·command'.··s | ||
| 0003 | 0003c260:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | ||
| 0003 | 0003c270:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | ||
| 0003 | 0003c280:·6e73·7461·6c6c·5f63·6d64·3a20·646e·6620··nstall_cmd:·dnf· | ||
| 0003 | 0003c290:·7265·696e·7374·616c·6c20·2d79·0a20·2077··reinstall·-y.··w | ||
| 0003 | 0003c2a0:·6865·6e3a·2061·6e73·6962·6c65·5f64·6973··hen:·ansible_dis | ||
| 0003 | 0003c2b0:·7472·6962·7574·696f·6e20·696e·205b·2022··tribution·in·[·" | ||
| 0003 | 0003c2c0:·4665·646f·7261·222c·2022·5265·6448·6174··Fedora",·"RedHat | ||
| 0003 | 0003c2d0:·222c·2022·4365·6e74·4f53·222c·2022·4f72··",·"CentOS",·"Or | ||
| 0003 | 0003c2e0:·6163·6c65·4c69·6e75·7822·205d·0a20·2074··acleLinux"·].··t | ||
| 0003 | 0003c2f0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003 | 0003c300:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003c | 0003c310:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003c | 0003c320:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003c | 0003c330:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003c | 0003c340:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003c | 0003c350:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c | 0003c360:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003c | 0003c370:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003c | 0003c380:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003c | 0003c390:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003c | 0003c3a0:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003c | 0003c3b0:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003c | 0003c3c0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003c | 0003c3d0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003c | 0003c3e0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003c | 0003c3f0:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003c | 0003c400:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003c | 0003c410:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003c | 0003c420:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003c | 0003c430:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| Max diff block lines reached; 10839173/10880489 bytes (99.62%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ··············Top·Secret | 63 | ··············Top·Secret |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:10 | 66 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 67 | ····*·cpe:/o:centos:centos:10 | 67 | ····*·cpe:/o:centos:centos:10 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 132, 14 lines modified | Offset 132, 27 lines modified | ||
| 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 141 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 142 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 143 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 144 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 145 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 146 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 144 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 152 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 145 | ··set_fact: | 153 | ··set_fact: |
| Offset 266, 27 lines modified | Offset 279, 14 lines modified | ||
| 266 | ··-·PCI-DSSv4-11.5.2 | 279 | ··-·PCI-DSSv4-11.5.2 |
| 267 | ··-·high_complexity | 280 | ··-·high_complexity |
| 268 | ··-·high_severity | 281 | ··-·high_severity |
| 269 | ··-·medium_disruption | 282 | ··-·medium_disruption |
| 270 | ··-·no_reboot_needed | 283 | ··-·no_reboot_needed |
| 271 | ··-·restrict_strategy | 284 | ··-·restrict_strategy |
| 272 | ··-·rpm_verify_hashes | 285 | ··-·rpm_verify_hashes |
| 273 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 274 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 275 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 276 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 277 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 278 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 279 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 280 | fi | ||
| 281 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 286 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 282 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 287 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 283 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 288 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 284 | run·the·following·command·to·determine·which·package·owns·it: | 289 | run·the·following·command·to·determine·which·package·owns·it: |
| 285 | $·rpm·-qf·FILENAME | 290 | $·rpm·-qf·FILENAME |
| 286 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 291 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 287 | $·sudo·rpm·--setugids·PACKAGENAME | 292 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 305, 14 lines modified | Offset 305, 40 lines modified | ||
| 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 305 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 306 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 306 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 307 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 308 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 311 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 311 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 317 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 318 | declare·-A·SETPERMS_RPM_DICT | ||
| 319 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 320 | #·is·expected·by·the·RPM·database | ||
| 321 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 322 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 323 | do | ||
| 324 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 325 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 326 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 327 | done | ||
| 328 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 329 | #·correct·values | ||
| 330 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 331 | do | ||
| 332 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 333 | done | ||
| 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 317 | -·name:·Read·list·of·files·with·incorrect·ownership | 339 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 318 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 340 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 387, 40 lines modified | Offset 413, 14 lines modified | ||
| 387 | ··-·PCI-DSSv4-11.5.2 | 413 | ··-·PCI-DSSv4-11.5.2 |
| 388 | ··-·high_complexity | 414 | ··-·high_complexity |
| 389 | ··-·high_severity | 415 | ··-·high_severity |
| 390 | ··-·medium_disruption | 416 | ··-·medium_disruption |
| 391 | ··-·no_reboot_needed | 417 | ··-·no_reboot_needed |
| 392 | ··-·restrict_strategy | 418 | ··-·restrict_strategy |
| 393 | ··-·rpm_verify_ownership | 419 | ··-·rpm_verify_ownership |
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 399 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1171574/1179221 bytes (99.35%) of diff not shown. | |||
| Offset 14421, 15 lines modified | Offset 14421, 15 lines modified | ||
| 00038540:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038540:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038550:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038550:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038560:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038560:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038570:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038570:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038580:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038580:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038590:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038590:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 000385a0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 000385a0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 000385b0:·3230·3234·2d31·312d·303 | 000385b0:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 000385c0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 000385c0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 000385d0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 000385d0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 000385e0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 000385e0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 000385f0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 000385f0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038600:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038600:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038610:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038610:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038620:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038620:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15299, 301 lines modified | Offset 15299, 301 lines modified | ||
| 0003bc20:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003bc20:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003bc30:·743d·2223·6964·6d36·3933·3422·2074·6162··t="#idm6934"·tab | 0003bc30:·743d·2223·6964·6d36·3933·3422·2074·6162··t="#idm6934"·tab | ||
| 0003bc40:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003bc40:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003bc50:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003bc50:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003bc60:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003bc60:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003bc70:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003bc70:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003bc80:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003bc80:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003bc90:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003bca0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003bcb0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bcc0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bcd0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bce0:·6964·6d36·3933·3422·3e3c·7072·653e·3c63··idm6934"><pre><c | |||
| 0003bcf0:·6f64·653e·0a23·2046·696e·6420·7768·6963··ode>.#·Find·whic | |||
| 0003bd00:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | |||
| 0003bd10:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | |||
| 0003bd20:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | |||
| 0003bd30:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | |||
| 0003bd40:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | |||
| 0003bd50:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | |||
| 0003bd60:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | |||
| 0003bd70:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003bd80:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | |||
| 0003bd90:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | |||
| 0003bda0:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | |||
| 0003bdb0:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | |||
| 0003bdc0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | |||
| 0003bdd0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | |||
| 0003bde0:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | |||
| 0003bdf0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | |||
| 0003be00:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | |||
| 0003be10:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | |||
| 0003be20:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | |||
| 0003be30:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | |||
| 0003be40:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | |||
| 0003be50:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | |||
| 0003be60:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | |||
| 0003be70:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | |||
| 0003be80:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | |||
| 0003be90:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003bea0:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | |||
| 0003beb0:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | |||
| 0003bec0:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | |||
| 0003bed0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | |||
| 0003bee0:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | |||
| 0003bef0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bf00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bf10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bf20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bf30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bf40:·743d·2223·6964·6d36·3933·3522·2074·6162··t="#idm6935"·tab | |||
| 0003bf50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bf60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bf70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bf80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bf90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b | 0003bfa0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003b | 0003bfb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003b | 0003bfc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b | 0003bfd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b | 0003bfe0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b | 0003bff0:·643d·2269·646d·3639·3335·223e·3c74·6162··d="idm6935"><tab | ||
| 0003 | 0003c000:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003 | 0003c010:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003 | 0003c020:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003 | 0003c030:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003 | 0003c040:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003 | 0003c050:·3a3c·2f74·683e·3c74·643e·6869·6768·3c2f··:</th><td>high</ | ||
| 0003 | 0003c060:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003 | 0003c070:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003 | 0003c080:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | ||
| 0003 | 0003c090:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003 | 0003c0a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003 | 0003c0b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003 | 0003c0c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003 | 0003c0d0:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | ||
| 0003 | 0003c0e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003 | 0003c0f0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 0003 | 0003c100:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| 0003 | 0003c110:·6b61·6765·206d·616e·6167·6572·2072·6569··kage·manager·rei | ||
| 0003 | 0003c120:·6e73·7461·6c6c·2063·6f6d·6d61·6e64·270a··nstall·command'. | ||
| 0003 | 0003c130:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | ||
| 0003 | 0003c140:·7061·636b·6167·655f·6d61·6e61·6765·725f··package_manager_ | ||
| 0003 | 0003c150:·7265·696e·7374·616c·6c5f·636d·643a·2064··reinstall_cmd:·d | ||
| 0003 | 0003c160:·6e66·2072·6569·6e73·7461·6c6c·202d·790a··nf·reinstall·-y. | ||
| 0003 | 0003c170:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | ||
| 0003 | 0003c180:·6469·7374·7269·6275·7469·6f6e·2069·6e20··distribution·in· | ||
| 0003 | 0003c190:·5b20·2246·6564·6f72·6122·2c20·2252·6564··[·"Fedora",·"Red | ||
| 0003 | 0003c1a0:·4861·7422·2c20·2243·656e·744f·5322·2c20··Hat",·"CentOS",· | ||
| 0003 | 0003c1b0:·224f·7261·636c·654c·696e·7578·2220·5d0a··"OracleLinux"·]. | ||
| 0003 | 0003c1c0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003 | 0003c1d0:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003 | 0003c1e0:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003 | 0003c1f0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003 | 0003c200:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003 | 0003c210:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003 | 0003c220:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003 | 0003c230:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003 | 0003c240:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003 | 0003c250:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003 | 0003c260:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003 | 0003c270:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003 | 0003c280:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003 | 0003c290:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003 | 0003c2a0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003 | 0003c2b0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003 | 0003c2c0:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003 | 0003c2d0:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003 | 0003c2e0:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003 | 0003c2f0:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003 | 0003c300:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| Max diff block lines reached; 15834374/15875690 bytes (99.74%) of diff not shown. | |||
| Offset 62, 15 lines modified | Offset 62, 15 lines modified | ||
| 62 | ··············Linux·10 | 62 | ··············Linux·10 |
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:10 | 65 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 66 | ····*·cpe:/o:centos:centos:10 | 66 | ····*·cpe:/o:centos:centos:10 |
| 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 74 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 129, 14 lines modified | Offset 129, 27 lines modified | ||
| 129 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 129 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 130 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 130 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 131 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 131 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 138 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 139 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 140 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 141 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 142 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 143 | fi | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 141 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 149 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 142 | ··set_fact: | 150 | ··set_fact: |
| Offset 263, 27 lines modified | Offset 276, 14 lines modified | ||
| 263 | ··-·PCI-DSSv4-11.5.2 | 276 | ··-·PCI-DSSv4-11.5.2 |
| 264 | ··-·high_complexity | 277 | ··-·high_complexity |
| 265 | ··-·high_severity | 278 | ··-·high_severity |
| 266 | ··-·medium_disruption | 279 | ··-·medium_disruption |
| 267 | ··-·no_reboot_needed | 280 | ··-·no_reboot_needed |
| 268 | ··-·restrict_strategy | 281 | ··-·restrict_strategy |
| 269 | ··-·rpm_verify_hashes | 282 | ··-·rpm_verify_hashes |
| 270 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 271 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 272 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 273 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 274 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 275 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 276 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 277 | fi | ||
| 278 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 283 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 279 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 284 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 280 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 285 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 281 | run·the·following·command·to·determine·which·package·owns·it: | 286 | run·the·following·command·to·determine·which·package·owns·it: |
| 282 | $·rpm·-qf·FILENAME | 287 | $·rpm·-qf·FILENAME |
| 283 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 288 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 284 | $·sudo·rpm·--setugids·PACKAGENAME | 289 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 302, 14 lines modified | Offset 302, 40 lines modified | ||
| 302 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 302 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 303 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 303 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 304 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 304 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 305 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 305 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 306 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 306 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 307 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 307 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 308 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 308 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 314 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 315 | declare·-A·SETPERMS_RPM_DICT | ||
| 316 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 317 | #·is·expected·by·the·RPM·database | ||
| 318 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 319 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 320 | do | ||
| 321 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 322 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 323 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 324 | done | ||
| 325 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 326 | #·correct·values | ||
| 327 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 328 | do | ||
| 329 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 330 | done | ||
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 331 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 332 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 333 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 334 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 335 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 314 | -·name:·Read·list·of·files·with·incorrect·ownership | 336 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 315 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 337 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 384, 40 lines modified | Offset 410, 14 lines modified | ||
| 384 | ··-·PCI-DSSv4-11.5.2 | 410 | ··-·PCI-DSSv4-11.5.2 |
| 385 | ··-·high_complexity | 411 | ··-·high_complexity |
| 386 | ··-·high_severity | 412 | ··-·high_severity |
| 387 | ··-·medium_disruption | 413 | ··-·medium_disruption |
| 388 | ··-·no_reboot_needed | 414 | ··-·no_reboot_needed |
| 389 | ··-·restrict_strategy | 415 | ··-·restrict_strategy |
| 390 | ··-·rpm_verify_ownership | 416 | ··-·rpm_verify_ownership |
| 391 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 392 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 393 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 394 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 395 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 396 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1593044/1600693 bytes (99.52%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000384f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038500:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038500:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038510:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038510:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038520:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038520:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038530:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038530:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038540:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038540:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038550:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038560:·206f·6620·3230·3234·2d31·312d·303 | 00038560:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00038570:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038570:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038580:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038580:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038590:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038590:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000385a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000385a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000385b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000385b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000385c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000385c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000385d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000385d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15213, 234 lines modified | Offset 15213, 234 lines modified | ||
| 0003b6c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b6c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b6d0:·3732·3733·2220·7461·6269·6e64·6578·3d22··7273"·tabindex=" | 0003b6d0:·3732·3733·2220·7461·6269·6e64·6578·3d22··7273"·tabindex=" | ||
| 0003b6e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b6e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b6f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b6f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b700:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b700:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b710:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b710:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b720:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b720:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b730:·6469·6174·696f·6e20· | 0003b730:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 0003b740:· | 0003b740:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b750:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b760:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b770:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b780:·3733·223e·3c74·6162·6c65·2063·6c61·7373··73"><table·class | |||
| 0003b790:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b7a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b7b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b7c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b7d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b7e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b7f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b800:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b810:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b820:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b830:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b840:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b850:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b860:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b870:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b880:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b890:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b8a0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b8b0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b8c0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b8d0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b8e0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b8f0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b900:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b910:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b920:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b930:·2223·6964·6d37·3237·3422·2074·6162·696e··"#idm7274"·tabin | |||
| 0003b940:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b950:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b960:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b970:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b980:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b990:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b9a0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b | 0003b9b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003b9c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b9d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003b9e0:·6d37·3237·3422·3e3c·7461·626c·6520·636c··m7274"><table·cl | ||
| 0003b | 0003b9f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b | 0003ba00:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b | 0003ba10:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b | 0003ba20:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b | 0003ba30:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b | 0003ba40:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003ba50:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003ba60:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003b | 0003ba70:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b | 0003ba80:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b | 0003ba90:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b | 0003baa0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b | 0003bab0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003b | 0003bac0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003b | 0003bad0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | ||
| 0003b880:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b890:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b8a0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b8b0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b8c0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b8d0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b8e0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b8f0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b900:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b910:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b920:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b930:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b940:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b950:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b960:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b970:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b980:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b990:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b9a0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b9b0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b9c0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b9d0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b9e0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b | 0003bae0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003baf0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003bb00:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003bb10:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003bb20:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003bb30:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003bb40:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003bb50:·7620·5d3b·2074·6865·6e0a·0a69·6620·2120··v·];·then..if·!· | |||
| 0003bb60:·7270·6d20·2d71·202d·2d71·7569·6574·2022··rpm·-q·--quiet·" | |||
| 0003bb70:·6169·6465·2220·3b20·7468·656e·0a20·2020··aide"·;·then.··· | |||
| 0003bb80:·2064·6e66·2069·6e73·7461·6c6c·202d·7920···dnf·install·-y· | |||
| 0003bb90:·2261·6964·6522·0a66·690a·0a65·6c73·650a··"aide".fi..else. | |||
| 0003bba0:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003bbb0:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003bbc0:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003bbd0:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003bbe0:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003bbf0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bc00:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bc10:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bc20:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bc30:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| Max diff block lines reached; 32797266/32829336 bytes (99.90%) of diff not shown. | |||
| Offset 14417, 15 lines modified | Offset 14417, 15 lines modified | ||
| 00038500:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038500:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038510:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038510:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038520:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038520:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038530:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038530:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038540:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038540:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038550:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038560:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00038560:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00038570:·303 | 00038570:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00038580:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00038580:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00038590:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00038590:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000385a0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000385a0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000385b0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000385b0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000385c0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000385c0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000385d0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000385d0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 000385e0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 000385e0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15213, 234 lines modified | Offset 15213, 234 lines modified | ||
| 0003b6c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b6c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b6d0:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | 0003b6d0:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | ||
| 0003b6e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b6e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b6f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b6f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b700:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b700:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b710:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b710:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b720:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b720:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b730:·5265·6d65·6469·6174·696f·6e20· | 0003b730:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | ||
| 0003b740:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b750:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b760:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b770:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b780:·646d·3732·3733·223e·3c74·6162·6c65·2063··dm7273"><table·c | |||
| 0003b790:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b740:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b750:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b760:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b770:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b780:·6964·6d37·3237·3322·3e3c·7461·626c·6520··idm7273"><table· | |||
| 0003b790:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b7a0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b7 | 0003b7a0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b7b0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b7c0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b7d0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b7e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b7f0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b7c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b7d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b7e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b7f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b800:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b810:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b820:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b830:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b840:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b850:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b860:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b870:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b880:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b890:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b8a0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b8b0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b8c0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b8d0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b8e0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b8f0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b900:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b910:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b920:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b930:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b940:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b950:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b960:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b970:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b980:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b990:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b9a0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b9b0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b9c0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b9d0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b9e0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b9f0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003ba00:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003ba10:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003ba20:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ba30:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ba40:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ba50:·2d74·6172·6765·743d·2223·6964·6d37·3237··-target="#idm727 | |||
| 0003ba60:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | |||
| 0003ba70:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ba80:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ba90:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003baa0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bab0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bac0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003bad0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003bae0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003baf0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003bb00:·7365·2220·6964·3d22·6964·6d37·3237·3422··se"·id="idm7274" | |||
| 0003bb10:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003bb20:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bb30:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003bb40:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003bb50:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b800:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b810:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b820:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bb80:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003bb90:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bba0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003bbb0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003bbc0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003bbd0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003bbe0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003bbf0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003bc00:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003bc10:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003bc20:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003bc30:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003bc40:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003bc50:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003bc60:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003bc70:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003bc80:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003bc90:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003bca0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003bcb0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bcc0:·646d·3732·3735·2220·7461·6269·6e64·6578··dm7275"·tabindex | |||
| 0003bcd0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bce0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| Max diff block lines reached; 32706717/32738787 bytes (99.90%) of diff not shown. | |||
| Offset 14430, 15 lines modified | Offset 14430, 15 lines modified | ||
| 000385d0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385d0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385e0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385e0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 000385f0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 000385f0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038600:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038600:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038610:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038610:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038620:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038620:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038630:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038630:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038640:·6620·3230·3234·2d31·312d·303 | 00038640:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00038650:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038650:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038660:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038660:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038670:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038670:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038680:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038680:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038690:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038690:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386a0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386a0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386b0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386b0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15182, 236 lines modified | Offset 15182, 236 lines modified | ||
| 0003b4d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b4d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b4e0:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | 0003b4e0:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | ||
| 0003b4f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b4f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b500:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b500:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b510:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b510:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b520:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b520:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b530:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b530:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b540:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b550:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b560:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b570:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b580:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b590:·3432·3822·3e3c·7461·626c·6520·636c·6173··428"><table·clas | |||
| 0003b5a0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b540:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b550:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b560:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b570:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b580:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b590:·3834·3238·223e·3c74·6162·6c65·2063·6c61··8428"><table·cla | |||
| 0003b5a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b5b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b5 | 0003b5b0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b5c0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b5d0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b5e0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b5f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b600:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b610:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b620:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b630:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b5d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b5e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b5f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b600:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b610:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b620:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b630:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b640:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b650:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b660:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b670:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b680:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b690:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b6a0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b6b0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b6c0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b6d0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b6e0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b6f0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b700:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b710:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b720:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b730:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b740:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b750:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b760:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003b770:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b780:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b790:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b7a0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b7b0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b7c0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b7d0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b7e0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b7f0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b800:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b810:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b820:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b830:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b840:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b850:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b860:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b870:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b880:·743d·2223·6964·6d38·3432·3922·2074·6162··t="#idm8429"·tab | |||
| 0003b890:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b8a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b8b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b8c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b8d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b8e0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b8f0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b900:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b910:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b920:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b930:·3d22·6964·6d38·3432·3922·3e3c·7461·626c··="idm8429"><tabl | |||
| 0003b940:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b950:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b960:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b970:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b980:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b990:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b9a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b9b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b9c0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b9d0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b9e0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b9f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ba00:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b | 0003b640:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b650:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b660:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b670:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b680:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b690:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b6a0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b6b0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b6c0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b6d0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b6e0:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003ba20:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| Max diff block lines reached; 22017100/22049446 bytes (99.85%) of diff not shown. | |||
| Offset 14429, 15 lines modified | Offset 14429, 15 lines modified | ||
| 000385c0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385c0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385d0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385d0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 000385e0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 000385e0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 000385f0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 000385f0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038600:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038600:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038610:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038610:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038620:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038620:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038630:·6620·3230·3234·2d31·312d·303 | 00038630:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00038640:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038640:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038650:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038650:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038660:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038660:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038670:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038670:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038680:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038680:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038690:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038690:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386a0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386a0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15187, 236 lines modified | Offset 15187, 236 lines modified | ||
| 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b530:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | 0003b530:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | ||
| 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b590:·5265·6d65·6469·6174·696f·6e20· | 0003b590:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | ||
| 0003b5a0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b5b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5e0:·646d·3834·3238·223e·3c74·6162·6c65·2063··dm8428"><table·c | |||
| 0003b5f0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b5a0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b5b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b5c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b5d0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b5e0:·6964·6d38·3432·3822·3e3c·7461·626c·6520··idm8428"><table· | |||
| 0003b5f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b600:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b6 | 0003b600:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b610:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b620:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b630:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b640:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b650:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b660:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b620:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b630:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b640:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b650:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b660:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b670:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b680:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b690:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b6a0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b6b0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b6 | 0003b670:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b680:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b6d0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b6e0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b6f0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b700:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b710:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b720:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b730:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b740:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b750:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b760:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b770:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b780:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b790:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b7a0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b7b0:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003b7c0:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b7d0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b7e0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b7f0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b800:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b810:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b820:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b830:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b840:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b850:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b860:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b870:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b880:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b890:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b8a0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b8b0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b8c0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b8d0:·7267·6574·3d22·2369·646d·3834·3239·2220··rget="#idm8429"· | |||
| 0003b8e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b8f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b900:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b910:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b920:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b930:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b940:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b950:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b960:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b970:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b980:·2069·643d·2269·646d·3834·3239·223e·3c74···id="idm8429"><t | |||
| 0003b990:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b9a0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b9b0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b9c0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b9d0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b9e0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b9f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ba00:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ba10:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ba20:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ba30:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003ba40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ba50:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b | 0003b690:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b6a0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b6b0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b6c0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b6d0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b6e0:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003b6f0:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b700:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b710:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b720:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b730:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003ba70:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ba80:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003ba90:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| Max diff block lines reached; 22435407/22467753 bytes (99.86%) of diff not shown. | |||
| Offset 14431, 15 lines modified | Offset 14431, 15 lines modified | ||
| 000385e0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385e0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385f0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385f0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038600:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038600:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038610:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038610:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038620:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038620:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038630:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038630:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038640:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038640:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038650:·6620·3230·3234·2d31·312d·303 | 00038650:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00038660:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038660:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038670:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038670:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038680:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038680:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038690:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038690:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386a0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386a0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386b0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386b0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386c0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386c0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15178, 235 lines modified | Offset 15178, 235 lines modified | ||
| 0003b490:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | 0003b490:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | ||
| 0003b4a0:·3238·2220·7461·6269·6e64·6578·3d22·3022··28"·tabindex="0" | 0003b4a0:·3238·2220·7461·6269·6e64·6578·3d22·3022··28"·tabindex="0" | ||
| 0003b4b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b4b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b4c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b4c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b4d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b4d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b4e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b4e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b4f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b4f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b500:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b510:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b520:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b530:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b540:·7073·6522·2069·643d·2269·646d·3834·3238··pse"·id="idm8428 | |||
| 0003b550:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b560:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b500:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b510:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b520:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b530:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b540:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | |||
| 0003b550:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003b560:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b570:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b5 | 0003b570:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b580:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b590:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b5a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b5b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b5c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b5d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b5e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b5f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b590:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b5a0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b5b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b5c0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b5d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b5e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b5f0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b600:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b610:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b620:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b630:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b640:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b650:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b660:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b670:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b680:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b690:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b6a0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b6b0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b6c0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b6d0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b6e0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b6f0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b700:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b710:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003b720:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003b730:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b740:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b750:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b760:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b770:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b780:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b790:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b7a0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b7b0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b7c0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b7d0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b7e0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b7f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b800:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b810:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b820:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b830:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b840:·2369·646d·3834·3239·2220·7461·6269·6e64··#idm8429"·tabind | |||
| 0003b850:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b860:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b870:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b880:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b890:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b8a0:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003b8b0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b8c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b8d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b8e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b8f0:·646d·3834·3239·223e·3c74·6162·6c65·2063··dm8429"><table·c | |||
| 0003b900:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b910:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b920:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b930:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b940:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b950:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b960:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b970:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b980:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b990:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b9a0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b9b0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b9c0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b | 0003b600:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b610:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b620:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b630:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b640:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b650:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b660:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b670:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b680:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b690:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b6a0:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b9e0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| Max diff block lines reached; 9232488/9264696 bytes (99.65%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 135, 53 lines modified | Offset 135, 26 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 139 | ············_\x8c_\x8i_\x8s············6.1.1 | 139 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | -·name:·Ensure·aide·is·installed | ||
| 148 | ··package: | ||
| 149 | ····name:·aide | ||
| 150 | ····state:·present | ||
| 151 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 152 | ··tags: | ||
| 153 | ··-·CJIS-5.10.1.3 | ||
| 154 | ··-·DISA-STIG-RHEL-09-651010 | ||
| 155 | ··-·NIST-800-53-CM-6(a) | ||
| 156 | ··-·PCI-DSS-Req-11.5 | ||
| 157 | ··-·PCI-DSSv4-11.5.2 | ||
| 158 | ··-·enable_strategy | ||
| 159 | ··-·low_complexity | ||
| 160 | ··-·low_disruption | ||
| 161 | ··-·medium_severity | ||
| 162 | ··-·no_reboot_needed | ||
| 163 | ··-·package_aide_installed | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 169 | include·install_aide | 147 | include·install_aide |
| 170 | class·install_aide·{ | 148 | class·install_aide·{ |
| 171 | ··package·{·'aide': | 149 | ··package·{·'aide': |
| 172 | ····ensure·=>·'installed', | 150 | ····ensure·=>·'installed', |
| 173 | ··} | 151 | ··} |
| 174 | } | 152 | } |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | #·Remediation·is·applicable·only·in·certain·platforms | 158 | #·Remediation·is·applicable·only·in·certain·platforms |
| 185 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 196, 21 lines modified | Offset 169, 48 lines modified | ||
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 201 | package·install·aide | 174 | package·install·aide |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 207 | package·--add=aide | 184 | package·--add=aide |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | -·name:·Ensure·aide·is·installed | ||
| 191 | ··package: | ||
| 192 | ····name:·aide | ||
| 193 | ····state:·present | ||
| 194 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 195 | ··tags: | ||
| 196 | ··-·CJIS-5.10.1.3 | ||
| 197 | ··-·DISA-STIG-RHEL-09-651010 | ||
| 198 | ··-·NIST-800-53-CM-6(a) | ||
| 199 | ··-·PCI-DSS-Req-11.5 | ||
| 200 | ··-·PCI-DSSv4-11.5.2 | ||
| 201 | ··-·enable_strategy | ||
| 202 | ··-·low_complexity | ||
| 203 | ··-·low_disruption | ||
| 204 | ··-·medium_severity | ||
| 205 | ··-·no_reboot_needed | ||
| 206 | ··-·package_aide_installed | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | Run·the·following·command·to·generate·a·new·database: | 208 | Run·the·following·command·to·generate·a·new·database: |
| 210 | $·sudo·/usr/sbin/aide·--init | 209 | $·sudo·/usr/sbin/aide·--init |
| 211 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 212 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 211 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 213 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 212 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 214 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 213 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 235, 14 lines modified | Offset 235, 28 lines modified | ||
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 236 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 236 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 238 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 238 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 239 | ············_\x8c_\x8i_\x8s············6.1.1 | 239 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 240 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 240 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 241 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 241 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1034809/1040868 bytes (99.42%) of diff not shown. | |||
| Offset 14430, 15 lines modified | Offset 14430, 15 lines modified | ||
| 000385d0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 000385d0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 000385e0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 000385e0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 000385f0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 000385f0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038600:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038600:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038610:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038610:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038620:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038620:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038630:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038630:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038640:·3234·2d31·312d·303 | 00038640:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00038650:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038650:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038660:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038660:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038670:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038670:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038680:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038680:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038690:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038690:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000386a0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000386a0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 000386b0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 000386b0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 14849, 217 lines modified | Offset 14849, 217 lines modified | ||
| 0003a000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003a000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003a010:·3132·3538·3922·2074·6162·696e·6465·783d··12589"·tabindex= | 0003a010:·3132·3538·3922·2074·6162·696e·6465·783d··12589"·tabindex= | ||
| 0003a020:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003a020:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003a030:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003a030:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003a040:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003a040:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003a050:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003a050:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003a060:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003a060:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003a070:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003a080:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003a090:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a0a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003a0b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003a0c0:·3132·3538·3922·3e3c·7461·626c·6520·636c··12589"><table·cl | |||
| 0003a0d0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003a0e0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003a0f0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003a100:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003a110:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003a120:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003a130:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003a140:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003a150:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a160:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003a170:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003a180:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003a190:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003a1a0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003a1b0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003a1c0:·206e·616d·653a·2045·6e73·7572·6520·646e···name:·Ensure·dn | |||
| 0003a1d0:·662d·6175·746f·6d61·7469·6320·6973·2069··f-automatic·is·i | |||
| 0003a1e0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003a1f0:·6765·3a0a·2020·2020·6e61·6d65·3a20·646e··ge:.····name:·dn | |||
| 0003a200:·662d·6175·746f·6d61·7469·630a·2020·2020··f-automatic.···· | |||
| 0003a210:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003a220:·2074·6167·733a·0a20·202d·2065·6e61·626c···tags:.··-·enabl | |||
| 0003a230:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003a240:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003a250:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003a260:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003a270:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003a280:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003a290:·636b·6167·655f·646e·662d·6175·746f·6d61··ckage_dnf-automa | |||
| 0003a2a0:·7469·635f·696e·7374·616c·6c65·640a·3c2f··tic_installed.</ | |||
| 0003a2b0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003a2c0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003a2d0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003a2e0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003a2f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003a300:·2369·646d·3132·3539·3022·2074·6162·696e··#idm12590"·tabin | |||
| 0003a310:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003a320:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003a330:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003a340:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003a350:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003a | 0003a070:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | ||
| 0003a | 0003a080:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003a | 0003a090:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003a | 0003a0a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003a | 0003a0b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | ||
| 0003a | 0003a0c0:·3235·3839·223e·3c74·6162·6c65·2063·6c61··2589"><table·cla | ||
| 0003a | 0003a0d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003a | 0003a0e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003a | 0003a0f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003a | 0003a100:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003a | 0003a110:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003a | 0003a120:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003a | 0003a130:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003a430:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003a440:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a450:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003a460:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003a470:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003a480:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003a490:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003a4a0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003a4b0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003a4c0:·6c5f·646e·662d·6175·746f·6d61·7469·630a··l_dnf-automatic. | |||
| 0003a4d0:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f64··.class·install_d | |||
| 0003a4e0:·6e66·2d61·7574·6f6d·6174·6963·207b·0a20··nf-automatic·{.· | |||
| 0003a4f0:·2070·6163·6b61·6765·207b·2027·646e·662d···package·{·'dnf- | |||
| 0003a500:·6175·746f·6d61·7469·6327·3a0a·2020·2020··automatic':.···· | |||
| 0003a510:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003a520:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003a530:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003a540:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003a550:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003a560:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003a570:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003a580:·3d22·2369·646d·3132·3539·3122·2074·6162··="#idm12591"·tab | |||
| 0003a590:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003a5a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003a5b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003a5c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003a5d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003a5e0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003a5f0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003a600:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003a610:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a620:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003a630:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003a640:·3132·3539·3122·3e3c·7072·653e·3c63·6f64··12591"><pre><cod | |||
| 0003a650:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003a660:·6e61·6d65·203d·2022·646e·662d·6175·746f··name·=·"dnf-auto | |||
| 0003a670:·6d61·7469·6322·0a76·6572·7369·6f6e·203d··matic".version·= | |||
| 0003a680:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003a690:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003a6a0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003a6b0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003a6c0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003a6d0:·6172·6765·743d·2223·6964·6d31·3235·3932··arget="#idm12592 | |||
| 0003a6e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| Max diff block lines reached; 3110278/3140002 bytes (99.05%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 75 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 76 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 76 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 77 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 77 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 100, 47 lines modified | Offset 100, 26 lines modified | ||
| 100 | $·sudo·dnf·install·dnf-automatic | 100 | $·sudo·dnf·install·dnf-automatic |
| 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 102 | ············suitable·for·automatic,·regular·execution. | 102 | ············suitable·for·automatic,·regular·execution. |
| 103 | Severity: ··medium | 103 | Severity: ··medium |
| 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 105 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 105 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 106 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 106 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 112 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 113 | ··package: | ||
| 114 | ····name:·dnf-automatic | ||
| 115 | ····state:·present | ||
| 116 | ··tags: | ||
| 117 | ··-·enable_strategy | ||
| 118 | ··-·low_complexity | ||
| 119 | ··-·low_disruption | ||
| 120 | ··-·medium_severity | ||
| 121 | ··-·no_reboot_needed | ||
| 122 | ··-·package_dnf-automatic_installed | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | include·install_dnf-automatic | 112 | include·install_dnf-automatic |
| 129 | class·install_dnf-automatic·{ | 113 | class·install_dnf-automatic·{ |
| 130 | ··package·{·'dnf-automatic': | 114 | ··package·{·'dnf-automatic': |
| 131 | ····ensure·=>·'installed', | 115 | ····ensure·=>·'installed', |
| 132 | ··} | 116 | ··} |
| 133 | } | 117 | } |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | [[packages]] | ||
| 136 | name·=·"dnf-automatic" | ||
| 137 | version·=·"*" | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 123 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 149, 21 lines modified | Offset 128, 42 lines modified | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | package·install·dnf-automatic | 133 | package·install·dnf-automatic |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | [[packages]] | ||
| 136 | name·=·"dnf-automatic" | ||
| 137 | version·=·"*" | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | package·--add=dnf-automatic | 143 | package·--add=dnf-automatic |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 150 | ··package: | ||
| 151 | ····name:·dnf-automatic | ||
| 152 | ····state:·present | ||
| 153 | ··tags: | ||
| 154 | ··-·enable_strategy | ||
| 155 | ··-·low_complexity | ||
| 156 | ··-·low_disruption | ||
| 157 | ··-·medium_severity | ||
| 158 | ··-·no_reboot_needed | ||
| 159 | ··-·package_dnf-automatic_installed | ||
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 160 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 161 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 163 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 162 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 164 | automatic.conf. | 163 | automatic.conf. |
| 165 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 164 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 166 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 165 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 167 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 166 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 173, 36 lines modified | Offset 173, 14 lines modified | ||
| 173 | Severity: ··medium | 173 | Severity: ··medium |
| 174 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 174 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 175 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 175 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 176 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 176 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 177 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 177 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 178 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 178 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 179 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 179 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 185 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 186 | ··ini_file: | ||
| 187 | ····dest:·/etc/dnf/automatic.conf | ||
| 188 | ····section:·commands | ||
| 189 | ····option:·apply_updates | ||
| 190 | ····value:·'yes' | ||
| 191 | ····create:·true | ||
| 192 | ··tags: | ||
| Max diff block lines reached; 208393/214145 bytes (97.31%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 000384f0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038500:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038500:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038510:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038510:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038520:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038520:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038530:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038530:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038540:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038540:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038550:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038560:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00038560:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00038570:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038570:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038580:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038580:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038590:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038590:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000385a0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000385a0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000385b0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000385b0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000385c0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000385c0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000385d0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000385d0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15226, 249 lines modified | Offset 15226, 249 lines modified | ||
| 0003b790:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | 0003b790:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | ||
| 0003b7a0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | 0003b7a0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | ||
| 0003b7b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b7b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b7c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b7c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b7d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b7d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b7e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b7e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b7f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b7f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b800:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b810:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b820:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b830:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b840:·6c61·7073·6522·2069·643d·2269·646d·3931··lapse"·id="idm91 | |||
| 0003b850:·3837·223e·3c74·6162·6c65·2063·6c61·7373··87"><table·class | |||
| 0003b8 | 0003b800:·6961·7469·6f6e·204b·7562·6572·6e65·7465··iation·Kubernete | ||
| 0003b810:·7320·736e·6970·7065·7420·e287·b23c·2f61··s·snippet·...</a | |||
| 0003b820:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b830:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b840:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b850:·6d39·3138·3722·3e3c·7461·626c·6520·636c··m9187"><table·cl | |||
| 0003b860:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b870:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b8 | 0003b880:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b880:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b890:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b8 | 0003b890:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b8a0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b8b0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b8c0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b8d0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b8 | 0003b8e0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b8f0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b900:·7464·3e74·7275·653c·2f74·643e·3c2f·7472··td>true</td></tr | |||
| 0003b8c0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b8d0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b8e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b8f0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b900:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b910:·7472·3e3c·7468·3e53·7472·6174·6567· | 0003b910:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b920:·3c2f·7468·3e3c·7464·3e72·6573·7472· | 0003b920:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003b930:·743c·2f74·643e·3c2f·7472·3e3c·2f74· | 0003b930:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003b940:·6c65·3e3c·7072·653e·3c63·6f64·653e· | 0003b940:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b950:·6e61·6d65·3a20·5843·4344·4620·5661·6c75··name:·XCCDF·Valu | |||
| 0003b960:·6520·7661·725f·7379·7374·656d·5f63·7279··e·var_system_cry | |||
| 0003b970:·7074·6f5f·706f·6c69·6379·2023·2070·726f··pto_policy·#·pro | |||
| 0003b980:·6d6f·7465·2074·6f20·7661·7269·6162·6c65··mote·to·variable | |||
| 0003b9 | 0003b950:·2d2d·2d0a·6170·6956·6572·7369·6f6e·3a20··---.apiVersion:· | ||
| 0003b960:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 0003b970:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 0003b980:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 0003b990:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| 0003b9a0:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | |||
| 0003b9b0:·6974·696f·6e3a·0a20·2020·2020·2076·6572··ition:.······ver | |||
| 0003b9c0:·7369·6f6e·3a20·332e·312e·300a·2020·2020··sion:·3.1.0.···· | |||
| 0003b9d0:·7379·7374·656d·643a·0a20·2020·2020·2075··systemd:.······u | |||
| 0003b9e0:·6e69·7473·3a0a·2020·2020·2020·2020·2d20··nits:.········-· | |||
| 0003b9f0:·6e61·6d65·3a20·636f·6e66·6967·7572·652d··name:·configure- | |||
| 0003ba00:·6372·7970·746f·2d70·6f6c·6963·792e·7365··crypto-policy.se | |||
| 0003ba10:·7276·6963·650a·2020·2020·2020·2020·2020··rvice.·········· | |||
| 0003ba20:·656e·6162·6c65·643a·2074·7275·650a·2020··enabled:·true.·· | |||
| 0003ba30:·2020·2020·2020·2020·636f·6e74·656e·7473··········contents | |||
| 0003ba40:·3a20·7c0a·2020·2020·2020·2020·2020·2020··:·|.············ | |||
| 0003ba50:·5b55·6e69·745d·0a20·2020·2020·2020·2020··[Unit].········· | |||
| 0003ba60:·2020·2042·6566·6f72·653d·6b75·6265·6c65·····Before=kubele | |||
| 0003ba70:·742e·7365·7276·6963·650a·2020·2020·2020··t.service.······ | |||
| 0003ba80:·2020·2020·2020·5b53·6572·7669·6365·5d0a········[Service]. | |||
| 0003ba90:·2020·2020·2020·2020·2020·2020·5479·7065··············Type | |||
| 0003baa0:·3d6f·6e65·7368·6f74·0a20·2020·2020·2020··=oneshot.······· | |||
| 0003bab0:·2020·2020·2045·7865·6353·7461·7274·3d75·······ExecStart=u | |||
| 0003bac0:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | |||
| 0003bad0:·6963·6965·7320·2d2d·7365·7420·7b7b·2e76··icies·--set·{{.v | |||
| 0003b | 0003bae0:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | ||
| 0003b9b0:·746f·5f70·6f6c·6963·793a·2021·2173·7472··to_policy:·!!str | |||
| 0003b | 0003baf0:·5f70·6f6c·6963·797d·7d0a·2020·2020·2020··_policy}}.······ | ||
| 0003bb00:·2020·2020·2020·5265·6d61·696e·4166·7465········RemainAfte | |||
| 0003bb10:·7245·7869·743d·7965·730a·2020·2020·2020··rExit=yes.······ | |||
| 0003bb20:·2020·2020·2020·5b49·6e73·7461·6c6c·5d0a········[Install]. | |||
| 0003bb30:·2020·2020·2020·2020·2020·2020·5761·6e74··············Want | |||
| 0003bb40:·6564·4279·3d6d·756c·7469·2d75·7365·722e··edBy=multi-user. | |||
| 0003bb50:·7461·7267·6574·0a3c·2f63·6f64·653e·3c2f··target.</code></ | |||
| 0003bb60:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bb70:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bb80:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bb90:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bba0:·2d74·6172·6765·743d·2223·6964·6d39·3138··-target="#idm918 | |||
| 0003bbb0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003bbc0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bbd0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bbe0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bbf0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bc00:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bc10:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003bc20:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bc30:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bc40:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bc50:·2220·6964·3d22·6964·6d39·3138·3822·3e3c··"·id="idm9188">< | |||
| 0003bc60:·7072·653e·3c63·6f64·653e·0a76·6172·5f73··pre><code>.var_s | |||
| 0003bc70:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | |||
| 0003bc80:·6963·793d·273c·6162·6272·2074·6974·6c65··icy='<abbr·title | |||
| 0003b9d | 0003bc90:·3d22·6672·6f6d·2050·726f·6669·6c65·2f72··="from·Profile/r | ||
| 0003b | 0003bca0:·6566·696e·652d·7661·6c75·653a·2078·6363··efine-value:·xcc | ||
| 0003b | 0003bcb0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 0003b | 0003bcc0:·742e·636f·6e74·656e·745f·7661·6c75·655f··t.content_value_ | ||
| 0003bcd0:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 0003bce0:·6f5f·706f·6c69·6379·223e·4445·4641·554c··o_policy">DEFAUL | |||
| 0003bcf0:·543c·2f61·6262·723e·270a·0a0a·7374·6465··T</abbr>'...stde | |||
| 0003bd00:·7272·5f6f·665f·6361·6c6c·3d24·2875·7064··rr_of_call=$(upd | |||
| 0003bd10:·6174·652d·6372·7970·746f·2d70·6f6c·6963··ate-crypto-polic | |||
| 0003bd20:·6965·7320·2d2d·7365·7420·247b·7661·725f··ies·--set·${var_ | |||
| 0003b | 0003bd30:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | ||
| 0003bd40:·6c69·6379·7d20·3226·6774·3b26·616d·703b··licy}·2>& | |||
| 0003bd50:·3120·2667·743b·202f·6465·762f·6e75·6c6c··1·>·/dev/null | |||
| Max diff block lines reached; 12813924/12848064 bytes (99.73%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Advanced | 60 | ··············Linux·9·-·Advanced |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 119, 14 lines modified | Offset 119, 58 lines modified | ||
| 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 120 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 120 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 121 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 121 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 123 | ············_\x8c_\x8i_\x8s······1.6.1 | 123 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 131 | --- | ||
| 132 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 133 | kind:·MachineConfig | ||
| 134 | spec: | ||
| 135 | ··config: | ||
| 136 | ····ignition: | ||
| 137 | ······version:·3.1.0 | ||
| 138 | ····systemd: | ||
| 139 | ······units: | ||
| 140 | ········-·name:·configure-crypto-policy.service | ||
| 141 | ··········enabled:·true | ||
| 142 | ··········contents:·| | ||
| 143 | ············[Unit] | ||
| 144 | ············Before=kubelet.service | ||
| 145 | ············[Service] | ||
| 146 | ············Type=oneshot | ||
| 147 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 148 | ············RemainAfterExit=yes | ||
| 149 | ············[Install] | ||
| 150 | ············WantedBy=multi-user.target | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 152 | var_system_crypto_policy='DEFAULT' | ||
| 153 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 154 | rc=$? | ||
| 155 | if·test·"$rc"·=·127;·then | ||
| 156 | » echo·"$stderr_of_call"·>&2 | ||
| 157 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 158 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 159 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 160 | » false··#·end·with·an·error·code | ||
| 161 | elif·test·"$rc"·!=·0;·then | ||
| 162 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 163 | » false··#·end·with·an·error·code | ||
| 164 | fi | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 131 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 170 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 132 | ··set_fact: | 171 | ··set_fact: |
| Offset 175, 58 lines modified | Offset 219, 14 lines modified | ||
| 175 | ··-·PCI-DSSv4-2.2.7 | 219 | ··-·PCI-DSSv4-2.2.7 |
| 176 | ··-·configure_crypto_policy | 220 | ··-·configure_crypto_policy |
| 177 | ··-·high_severity | 221 | ··-·high_severity |
| 178 | ··-·low_complexity | 222 | ··-·low_complexity |
| 179 | ··-·low_disruption | 223 | ··-·low_disruption |
| 180 | ··-·no_reboot_needed | 224 | ··-·no_reboot_needed |
| 181 | ··-·restrict_strategy | 225 | ··-·restrict_strategy |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 187 | --- | ||
| 188 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 189 | kind:·MachineConfig | ||
| 190 | spec: | ||
| 191 | ··config: | ||
| 192 | ····ignition: | ||
| 193 | ······version:·3.1.0 | ||
| 194 | ····systemd: | ||
| 195 | ······units: | ||
| 196 | ········-·name:·configure-crypto-policy.service | ||
| 197 | ··········enabled:·true | ||
| 198 | ··········contents:·| | ||
| 199 | ············[Unit] | ||
| 200 | ············Before=kubelet.service | ||
| 201 | ············[Service] | ||
| 202 | ············Type=oneshot | ||
| 203 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 204 | ············RemainAfterExit=yes | ||
| 205 | ············[Install] | ||
| 206 | ············WantedBy=multi-user.target | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 208 | var_system_crypto_policy='DEFAULT' | ||
| 209 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 210 | rc=$? | ||
| 211 | if·test·"$rc"·=·127;·then | ||
| 212 | » echo·"$stderr_of_call"·>&2 | ||
| 213 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 214 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 215 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 216 | » false··#·end·with·an·error·code | ||
| 217 | elif·test·"$rc"·!=·0;·then | ||
| 218 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 219 | » false··#·end·with·an·error·code | ||
| 220 | fi | ||
| 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 1139985/1145663 bytes (99.50%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 000384f0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038500:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038500:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038510:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038510:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038520:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038520:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038530:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038530:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038540:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038540:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038550:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | 00038550:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00038560:·2d30·3 | 00038560:·2d30·3729·0a20·2020·2020·2020·2020·2020··-07).··········· | ||
| 00038570:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038570:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038580:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038580:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038590:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038590:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 000385a0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 000385a0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 000385b0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 000385b0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 000385c0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 000385c0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 000385d0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 000385d0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15186, 249 lines modified | Offset 15186, 249 lines modified | ||
| 0003b510:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b510:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b520:·3931·3837·2220·7461·6269·6e64·6578·3d22··9187"·tabindex=" | 0003b520:·3931·3837·2220·7461·6269·6e64·6578·3d22··9187"·tabindex=" | ||
| 0003b530:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b530:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b540:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b540:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b550:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b550:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b560:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b560:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b570:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b570:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b580:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 0003b590:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0003b5a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5d0:·646d·3931·3837·223e·3c74·6162·6c65·2063··dm9187"><table·c | |||
| 0003b5e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b5f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b600:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b610:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b620:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b630:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b640:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b650:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b660:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b670:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b680:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 0003b690:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b6a0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003b6b0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003b6c0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b6d0:·3e2d·2d2d·0a61·7069·5665·7273·696f·6e3a··>---.apiVersion: | |||
| 0003b6e0:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | |||
| 0003b6f0:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | |||
| 0003b700:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | |||
| 0003b710:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | |||
| 0003b720:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | |||
| 0003b730:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | |||
| 0003b740:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | |||
| 0003b750:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | |||
| 0003b760:·756e·6974·733a·0a20·2020·2020·2020·202d··units:.········- | |||
| 0003b770:·206e·616d·653a·2063·6f6e·6669·6775·7265···name:·configure | |||
| 0003b780:·2d63·7279·7074·6f2d·706f·6c69·6379·2e73··-crypto-policy.s | |||
| 0003b790:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| 0003b7a0:·2065·6e61·626c·6564·3a20·7472·7565·0a20···enabled:·true.· | |||
| 0003b7b0:·2020·2020·2020·2020·2063·6f6e·7465·6e74···········content | |||
| 0003b7c0:·733a·207c·0a20·2020·2020·2020·2020·2020··s:·|.··········· | |||
| 0003b7d0:·205b·556e·6974·5d0a·2020·2020·2020·2020···[Unit].········ | |||
| 0003b7e0:·2020·2020·4265·666f·7265·3d6b·7562·656c······Before=kubel | |||
| 0003b7f0:·6574·2e73·6572·7669·6365·0a20·2020·2020··et.service.····· | |||
| 0003b800:·2020·2020·2020·205b·5365·7276·6963·655d·········[Service] | |||
| 0003b810:·0a20·2020·2020·2020·2020·2020·2054·7970··.············Typ | |||
| 0003b820:·653d·6f6e·6573·686f·740a·2020·2020·2020··e=oneshot.······ | |||
| 0003b830:·2020·2020·2020·4578·6563·5374·6172·743d········ExecStart= | |||
| 0003b840:·7570·6461·7465·2d63·7279·7074·6f2d·706f··update-crypto-po | |||
| 0003b850:·6c69·6369·6573·202d·2d73·6574·207b·7b2e··licies·--set·{{. | |||
| 0003b860:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 0003b870:·6f5f·706f·6c69·6379·7d7d·0a20·2020·2020··o_policy}}.····· | |||
| 0003b880:·2020·2020·2020·2052·656d·6169·6e41·6674·········RemainAft | |||
| 0003b890:·6572·4578·6974·3d79·6573·0a20·2020·2020··erExit=yes.····· | |||
| 0003b8a0:·2020·2020·2020·205b·496e·7374·616c·6c5d·········[Install] | |||
| 0003b8b0:·0a20·2020·2020·2020·2020·2020·2057·616e··.············Wan | |||
| 0003b8c0:·7465·6442·793d·6d75·6c74·692d·7573·6572··tedBy=multi-user | |||
| 0003b8d0:·2e74·6172·6765·740a·3c2f·636f·6465·3e3c··.target.</code>< | |||
| 0003b8e0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b8f0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b900:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b910:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b920:·612d·7461·7267·6574·3d22·2369·646d·3931··a-target="#idm91 | |||
| 0003b930:·3838·2220·7461·6269·6e64·6578·3d22·3022··88"·tabindex="0" | |||
| 0003b940:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b950:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b960:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b970:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b980:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b990:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b9a0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b9b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b9c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b9d0:·6522·2069·643d·2269·646d·3931·3838·223e··e"·id="idm9188"> | |||
| 0003b9e0:·3c70·7265·3e3c·636f·6465·3e0a·7661·725f··<pre><code>.var_ | |||
| 0003b9f0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 0003ba00:·6c69·6379·3d27·3c61·6262·7220·7469·746c··licy='<abbr·titl | |||
| 0003ba10:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 0003ba20:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 0003ba30:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 0003ba40:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 0003ba50:·5f76·6172·5f73·7973·7465·6d5f·6372·7970··_var_system_cryp | |||
| 0003ba60:·746f·5f70·6f6c·6963·7922·3e44·4546·4155··to_policy">DEFAU | |||
| 0003ba70:·4c54·3c2f·6162·6272·3e27·0a0a·0a73·7464··LT</abbr>'...std | |||
| 0003ba80:·6572·725f·6f66·5f63·616c·6c3d·2428·7570··err_of_call=$(up | |||
| 0003ba90:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 0003baa0:·6369·6573·202d·2d73·6574·2024·7b76·6172··cies·--set·${var | |||
| 0003bab0:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003bac0:·6f6c·6963·797d·2032·2667·743b·2661·6d70··olicy}·2>& | |||
| 0003bad0:·3b31·2026·6774·3b20·2f64·6576·2f6e·756c··;1·>·/dev/nul | |||
| 0003bae0:·6c29·0a72·633d·243f·0a0a·6966·2074·6573··l).rc=$?..if·tes | |||
| 0003baf0:·7420·2224·7263·2220·3d20·3132·373b·2074··t·"$rc"·=·127;·t | |||
| 0003bb00:·6865·6e0a·0965·6368·6f20·2224·7374·6465··hen..echo·"$stde | |||
| 0003bb10:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | |||
| 0003bb20:·2661·6d70·3b32·0a09·6563·686f·2022·4d61··&2..echo·"Ma | |||
| 0003bb30:·6b65·2073·7572·6520·7468·6174·2074·6865··ke·sure·that·the | |||
| 0003bb40:·2073·6372·6970·7420·6973·2069·6e73·7461···script·is·insta | |||
| 0003bb50:·6c6c·6564·206f·6e20·7468·6520·7265·6d65··lled·on·the·reme | |||
| 0003bb60:·6469·6174·6564·2073·7973·7465·6d2e·2220··diated·system."· | |||
| 0003bb70:·2667·743b·2661·6d70·3b32·0a09·6563·686f··>&2..echo | |||
| 0003bb80:·2022·5365·6520·6f75·7470·7574·206f·6620···"See·output·of· | |||
| 0003bb90:·7468·6520·2764·6e66·2070·726f·7669·6465··the·'dnf·provide | |||
| 0003bba0:·7320·7570·6461·7465·2d63·7279·7074·6f2d··s·update-crypto- | |||
| 0003bbb0:·706f·6c69·6369·6573·2720·636f·6d6d·616e··policies'·comman | |||
| 0003bbc0:·6422·2026·6774·3b26·616d·703b·320a·0965··d"·>&2..e | |||
| 0003bbd0:·6368·6f20·2274·6f20·7365·6520·7768·6174··cho·"to·see·what | |||
| 0003bbe0:·2070·6163·6b61·6765·2074·6f20·2872·6529···package·to·(re) | |||
| 0003bbf0:·696e·7374·616c·6c22·2026·6774·3b26·616d··install"·>&am | |||
| Max diff block lines reached; 8743102/8777242 bytes (99.61%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Basic | 60 | ··············Linux·9·-·Basic |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 14 lines modified | Offset 111, 58 lines modified | ||
| 111 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 111 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 112 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 113 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 113 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 115 | ············_\x8c_\x8i_\x8s······1.6.1 | 115 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 123 | --- | ||
| 124 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 125 | kind:·MachineConfig | ||
| 126 | spec: | ||
| 127 | ··config: | ||
| 128 | ····ignition: | ||
| 129 | ······version:·3.1.0 | ||
| 130 | ····systemd: | ||
| 131 | ······units: | ||
| 132 | ········-·name:·configure-crypto-policy.service | ||
| 133 | ··········enabled:·true | ||
| 134 | ··········contents:·| | ||
| 135 | ············[Unit] | ||
| 136 | ············Before=kubelet.service | ||
| 137 | ············[Service] | ||
| 138 | ············Type=oneshot | ||
| 139 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 140 | ············RemainAfterExit=yes | ||
| 141 | ············[Install] | ||
| 142 | ············WantedBy=multi-user.target | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | var_system_crypto_policy='DEFAULT' | ||
| 145 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 146 | rc=$? | ||
| 147 | if·test·"$rc"·=·127;·then | ||
| 148 | » echo·"$stderr_of_call"·>&2 | ||
| 149 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 150 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 151 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 152 | » false··#·end·with·an·error·code | ||
| 153 | elif·test·"$rc"·!=·0;·then | ||
| 154 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 155 | » false··#·end·with·an·error·code | ||
| 156 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 162 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 124 | ··set_fact: | 163 | ··set_fact: |
| Offset 167, 58 lines modified | Offset 211, 14 lines modified | ||
| 167 | ··-·PCI-DSSv4-2.2.7 | 211 | ··-·PCI-DSSv4-2.2.7 |
| 168 | ··-·configure_crypto_policy | 212 | ··-·configure_crypto_policy |
| 169 | ··-·high_severity | 213 | ··-·high_severity |
| 170 | ··-·low_complexity | 214 | ··-·low_complexity |
| 171 | ··-·low_disruption | 215 | ··-·low_disruption |
| 172 | ··-·no_reboot_needed | 216 | ··-·no_reboot_needed |
| 173 | ··-·restrict_strategy | 217 | ··-·restrict_strategy |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 179 | --- | ||
| 180 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 181 | kind:·MachineConfig | ||
| 182 | spec: | ||
| 183 | ··config: | ||
| 184 | ····ignition: | ||
| 185 | ······version:·3.1.0 | ||
| 186 | ····systemd: | ||
| 187 | ······units: | ||
| 188 | ········-·name:·configure-crypto-policy.service | ||
| 189 | ··········enabled:·true | ||
| 190 | ··········contents:·| | ||
| 191 | ············[Unit] | ||
| 192 | ············Before=kubelet.service | ||
| 193 | ············[Service] | ||
| 194 | ············Type=oneshot | ||
| 195 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 196 | ············RemainAfterExit=yes | ||
| 197 | ············[Install] | ||
| 198 | ············WantedBy=multi-user.target | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 200 | var_system_crypto_policy='DEFAULT' | ||
| 201 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 202 | rc=$? | ||
| 203 | if·test·"$rc"·=·127;·then | ||
| 204 | » echo·"$stderr_of_call"·>&2 | ||
| 205 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 206 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 207 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 208 | » false··#·end·with·an·error·code | ||
| 209 | elif·test·"$rc"·!=·0;·then | ||
| 210 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 211 | » false··#·end·with·an·error·code | ||
| 212 | fi | ||
| 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 846658/852330 bytes (99.33%) of diff not shown. | |||
| Offset 14417, 15 lines modified | Offset 14417, 15 lines modified | ||
| 00038500:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038500:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038510:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038510:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038520:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038520:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038530:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038530:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038540:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038540:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038550:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038550:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038560:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038560:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038570:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00038570:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038590:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038590:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000385a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000385a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000385b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000385b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000385c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000385c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000385d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000385d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000385e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000385e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15227, 249 lines modified | Offset 15227, 249 lines modified | ||
| 0003b7a0:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | 0003b7a0:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | ||
| 0003b7b0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | 0003b7b0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | ||
| 0003b7c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b7c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b7d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b7d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b7e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b7e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b7f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b7f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b800:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b800:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b810:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b820:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b830:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b840:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b850:·6c61·7073·6522·2069·643d·2269·646d·3931··lapse"·id="idm91 | |||
| 0003b860:·3837·223e·3c74·6162·6c65·2063·6c61·7373··87"><table·class | |||
| 0003b8 | 0003b810:·6961·7469·6f6e·204b·7562·6572·6e65·7465··iation·Kubernete | ||
| 0003b820:·7320·736e·6970·7065·7420·e287·b23c·2f61··s·snippet·...</a | |||
| 0003b830:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b840:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b850:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b860:·6d39·3138·3722·3e3c·7461·626c·6520·636c··m9187"><table·cl | |||
| 0003b870:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b880:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b8 | 0003b890:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b890:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b8a0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b8 | 0003b8a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b8b0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b8c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b8d0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b8e0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b8 | 0003b8f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b900:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b910:·7464·3e74·7275·653c·2f74·643e·3c2f·7472··td>true</td></tr | |||
| 0003b8d0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b8e0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b8f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b900:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b910:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b920:·7472·3e3c·7468·3e53·7472·6174·6567· | 0003b920:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b930:·3c2f·7468·3e3c·7464·3e72·6573·7472· | 0003b930:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003b940:·743c·2f74·643e·3c2f·7472·3e3c·2f74· | 0003b940:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003b950:·6c65·3e3c·7072·653e·3c63·6f64·653e· | 0003b950:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b960:·6e61·6d65·3a20·5843·4344·4620·5661·6c75··name:·XCCDF·Valu | |||
| 0003b970:·6520·7661·725f·7379·7374·656d·5f63·7279··e·var_system_cry | |||
| 0003b980:·7074·6f5f·706f·6c69·6379·2023·2070·726f··pto_policy·#·pro | |||
| 0003b990:·6d6f·7465·2074·6f20·7661·7269·6162·6c65··mote·to·variable | |||
| 0003b9 | 0003b960:·2d2d·2d0a·6170·6956·6572·7369·6f6e·3a20··---.apiVersion:· | ||
| 0003b970:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 0003b980:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 0003b990:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 0003b9a0:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| 0003b9b0:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | |||
| 0003b9c0:·6974·696f·6e3a·0a20·2020·2020·2076·6572··ition:.······ver | |||
| 0003b9d0:·7369·6f6e·3a20·332e·312e·300a·2020·2020··sion:·3.1.0.···· | |||
| 0003b9e0:·7379·7374·656d·643a·0a20·2020·2020·2075··systemd:.······u | |||
| 0003b9f0:·6e69·7473·3a0a·2020·2020·2020·2020·2d20··nits:.········-· | |||
| 0003ba00:·6e61·6d65·3a20·636f·6e66·6967·7572·652d··name:·configure- | |||
| 0003ba10:·6372·7970·746f·2d70·6f6c·6963·792e·7365··crypto-policy.se | |||
| 0003ba20:·7276·6963·650a·2020·2020·2020·2020·2020··rvice.·········· | |||
| 0003ba30:·656e·6162·6c65·643a·2074·7275·650a·2020··enabled:·true.·· | |||
| 0003ba40:·2020·2020·2020·2020·636f·6e74·656e·7473··········contents | |||
| 0003ba50:·3a20·7c0a·2020·2020·2020·2020·2020·2020··:·|.············ | |||
| 0003ba60:·5b55·6e69·745d·0a20·2020·2020·2020·2020··[Unit].········· | |||
| 0003ba70:·2020·2042·6566·6f72·653d·6b75·6265·6c65·····Before=kubele | |||
| 0003ba80:·742e·7365·7276·6963·650a·2020·2020·2020··t.service.······ | |||
| 0003ba90:·2020·2020·2020·5b53·6572·7669·6365·5d0a········[Service]. | |||
| 0003baa0:·2020·2020·2020·2020·2020·2020·5479·7065··············Type | |||
| 0003bab0:·3d6f·6e65·7368·6f74·0a20·2020·2020·2020··=oneshot.······· | |||
| 0003bac0:·2020·2020·2045·7865·6353·7461·7274·3d75·······ExecStart=u | |||
| 0003bad0:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | |||
| 0003bae0:·6963·6965·7320·2d2d·7365·7420·7b7b·2e76··icies·--set·{{.v | |||
| 0003b | 0003baf0:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | ||
| 0003b9c0:·746f·5f70·6f6c·6963·793a·2021·2173·7472··to_policy:·!!str | |||
| 0003b | 0003bb00:·5f70·6f6c·6963·797d·7d0a·2020·2020·2020··_policy}}.······ | ||
| 0003bb10:·2020·2020·2020·5265·6d61·696e·4166·7465········RemainAfte | |||
| 0003bb20:·7245·7869·743d·7965·730a·2020·2020·2020··rExit=yes.······ | |||
| 0003bb30:·2020·2020·2020·5b49·6e73·7461·6c6c·5d0a········[Install]. | |||
| 0003bb40:·2020·2020·2020·2020·2020·2020·5761·6e74··············Want | |||
| 0003bb50:·6564·4279·3d6d·756c·7469·2d75·7365·722e··edBy=multi-user. | |||
| 0003bb60:·7461·7267·6574·0a3c·2f63·6f64·653e·3c2f··target.</code></ | |||
| 0003bb70:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bb80:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bb90:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bba0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bbb0:·2d74·6172·6765·743d·2223·6964·6d39·3138··-target="#idm918 | |||
| 0003bbc0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003bbd0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bbe0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bbf0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bc00:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bc10:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bc20:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003bc30:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bc40:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bc50:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bc60:·2220·6964·3d22·6964·6d39·3138·3822·3e3c··"·id="idm9188">< | |||
| 0003bc70:·7072·653e·3c63·6f64·653e·0a76·6172·5f73··pre><code>.var_s | |||
| 0003bc80:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | |||
| 0003bc90:·6963·793d·273c·6162·6272·2074·6974·6c65··icy='<abbr·title | |||
| 0003b | 0003bca0:·3d22·6672·6f6d·2050·726f·6669·6c65·2f72··="from·Profile/r | ||
| 0003b | 0003bcb0:·6566·696e·652d·7661·6c75·653a·2078·6363··efine-value:·xcc | ||
| 0003b | 0003bcc0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 0003b | 0003bcd0:·742e·636f·6e74·656e·745f·7661·6c75·655f··t.content_value_ | ||
| 0003bce0:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 0003bcf0:·6f5f·706f·6c69·6379·223e·4445·4641·554c··o_policy">DEFAUL | |||
| 0003bd00:·543c·2f61·6262·723e·270a·0a0a·7374·6465··T</abbr>'...stde | |||
| 0003bd10:·7272·5f6f·665f·6361·6c6c·3d24·2875·7064··rr_of_call=$(upd | |||
| 0003bd20:·6174·652d·6372·7970·746f·2d70·6f6c·6963··ate-crypto-polic | |||
| 0003bd30:·6965·7320·2d2d·7365·7420·247b·7661·725f··ies·--set·${var_ | |||
| 0003b | 0003bd40:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | ||
| 0003bd50:·6c69·6379·7d20·3226·6774·3b26·616d·703b··licy}·2>& | |||
| 0003bd60:·3120·2667·743b·202f·6465·762f·6e75·6c6c··1·>·/dev/null | |||
| Max diff block lines reached; 9986078/10020218 bytes (99.66%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Intermediate | 60 | ··············Linux·9·-·Intermediate |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 119, 14 lines modified | Offset 119, 58 lines modified | ||
| 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 120 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 120 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 121 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 121 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 123 | ············_\x8c_\x8i_\x8s······1.6.1 | 123 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 131 | --- | ||
| 132 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 133 | kind:·MachineConfig | ||
| 134 | spec: | ||
| 135 | ··config: | ||
| 136 | ····ignition: | ||
| 137 | ······version:·3.1.0 | ||
| 138 | ····systemd: | ||
| 139 | ······units: | ||
| 140 | ········-·name:·configure-crypto-policy.service | ||
| 141 | ··········enabled:·true | ||
| 142 | ··········contents:·| | ||
| 143 | ············[Unit] | ||
| 144 | ············Before=kubelet.service | ||
| 145 | ············[Service] | ||
| 146 | ············Type=oneshot | ||
| 147 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 148 | ············RemainAfterExit=yes | ||
| 149 | ············[Install] | ||
| 150 | ············WantedBy=multi-user.target | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 152 | var_system_crypto_policy='DEFAULT' | ||
| 153 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 154 | rc=$? | ||
| 155 | if·test·"$rc"·=·127;·then | ||
| 156 | » echo·"$stderr_of_call"·>&2 | ||
| 157 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 158 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 159 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 160 | » false··#·end·with·an·error·code | ||
| 161 | elif·test·"$rc"·!=·0;·then | ||
| 162 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 163 | » false··#·end·with·an·error·code | ||
| 164 | fi | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 131 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 170 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 132 | ··set_fact: | 171 | ··set_fact: |
| Offset 175, 58 lines modified | Offset 219, 14 lines modified | ||
| 175 | ··-·PCI-DSSv4-2.2.7 | 219 | ··-·PCI-DSSv4-2.2.7 |
| 176 | ··-·configure_crypto_policy | 220 | ··-·configure_crypto_policy |
| 177 | ··-·high_severity | 221 | ··-·high_severity |
| 178 | ··-·low_complexity | 222 | ··-·low_complexity |
| 179 | ··-·low_disruption | 223 | ··-·low_disruption |
| 180 | ··-·no_reboot_needed | 224 | ··-·no_reboot_needed |
| 181 | ··-·restrict_strategy | 225 | ··-·restrict_strategy |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 187 | --- | ||
| 188 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 189 | kind:·MachineConfig | ||
| 190 | spec: | ||
| 191 | ··config: | ||
| 192 | ····ignition: | ||
| 193 | ······version:·3.1.0 | ||
| 194 | ····systemd: | ||
| 195 | ······units: | ||
| 196 | ········-·name:·configure-crypto-policy.service | ||
| 197 | ··········enabled:·true | ||
| 198 | ··········contents:·| | ||
| 199 | ············[Unit] | ||
| 200 | ············Before=kubelet.service | ||
| 201 | ············[Service] | ||
| 202 | ············Type=oneshot | ||
| 203 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 204 | ············RemainAfterExit=yes | ||
| 205 | ············[Install] | ||
| 206 | ············WantedBy=multi-user.target | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 208 | var_system_crypto_policy='DEFAULT' | ||
| 209 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 210 | rc=$? | ||
| 211 | if·test·"$rc"·=·127;·then | ||
| 212 | » echo·"$stderr_of_call"·>&2 | ||
| 213 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 214 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 215 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 216 | » false··#·end·with·an·error·code | ||
| 217 | elif·test·"$rc"·!=·0;·then | ||
| 218 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 219 | » false··#·end·with·an·error·code | ||
| 220 | fi | ||
| 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 1042761/1048447 bytes (99.46%) of diff not shown. | |||
| Offset 14413, 15 lines modified | Offset 14413, 15 lines modified | ||
| 000384c0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 000384c0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 000384d0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 000384d0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 000384e0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 000384e0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384f0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384f0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038500:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038500:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038510:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038510:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038520:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038520:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038530:·342d·3131·2d30·3 | 00038530:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 00038540:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038540:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038550:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038550:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038560:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038560:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038570:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038570:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038580:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038580:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038590:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038590:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 000385a0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 000385a0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15232, 236 lines modified | Offset 15232, 236 lines modified | ||
| 0003b7f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b7f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b800:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | 0003b800:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | ||
| 0003b810:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b810:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b820:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b820:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b830:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b830:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b840:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b840:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b850:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b850:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b860:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b870:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b880:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b890:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b8a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b8b0:·3432·3822·3e3c·7461·626c·6520·636c·6173··428"><table·clas | |||
| 0003b8c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b860:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b870:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b880:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b890:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b8a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b8b0:·3834·3238·223e·3c74·6162·6c65·2063·6c61··8428"><table·cla | |||
| 0003b8c0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b8d0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b8 | 0003b8d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b8e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b8f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b900:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b910:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b920:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b930:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b940:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b950:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b8f0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b900:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b910:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b920:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b930:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b940:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b950:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b960:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b970:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b980:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b990:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b9a0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b9b0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b9c0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b9d0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b9e0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b9f0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003ba00:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003ba10:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003ba20:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003ba30:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003ba40:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003ba50:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003ba60:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003ba70:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003ba80:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003ba90:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003baa0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bab0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bac0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bad0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bae0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003baf0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bb00:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bb10:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bb20:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bb30:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bb40:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bb50:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bb60:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bb70:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bb80:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bb90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bba0:·743d·2223·6964·6d38·3432·3922·2074·6162··t="#idm8429"·tab | |||
| 0003bbb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bbc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bbd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bbe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bbf0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bc00:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003bc10:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003bc20:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bc30:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bc40:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bc50:·3d22·6964·6d38·3432·3922·3e3c·7461·626c··="idm8429"><tabl | |||
| 0003bc60:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bc70:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bc80:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bc90:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bca0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003bcb0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bcc0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003bcd0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003bce0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bcf0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bd00:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003bd10:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003bd20:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b | 0003b960:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b970:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b980:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b990:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b9a0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b9b0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b9c0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b9d0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b9e0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b9f0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003ba00:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003bd40:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| Max diff block lines reached; 25000673/25033019 bytes (99.87%) of diff not shown. | |||
| Offset 14414, 15 lines modified | Offset 14414, 15 lines modified | ||
| 000384d0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 000384d0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 000384e0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 000384e0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 000384f0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 000384f0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00038500:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00038500:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00038510:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00038510:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00038520:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038520:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038530:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | 00038530:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00038540:·3 | 00038540:·3729·0a20·2020·2020·2020·2020·2020·2020··7).············· | ||
| 00038550:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00038550:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00038560:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00038560:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00038570:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00038570:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00038580:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00038580:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00038590:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00038590:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 000385a0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 000385a0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 000385b0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 000385b0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15201, 235 lines modified | Offset 15201, 235 lines modified | ||
| 0003b600:·7461·7267·6574·3d22·2369·646d·3834·3238··target="#idm8428 | 0003b600:·7461·7267·6574·3d22·2369·646d·3834·3238··target="#idm8428 | ||
| 0003b610:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b610:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b620:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b620:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b630:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b630:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b640:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b640:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b650:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b650:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b660:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b660:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b670:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b680:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b690:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b6a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b6b0:·6522·2069·643d·2269·646d·3834·3238·223e··e"·id="idm8428"> | |||
| 0003b6c0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b6d0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b670:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b680:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b690:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b6a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b6b0:·7365·2220·6964·3d22·6964·6d38·3432·3822··se"·id="idm8428" | |||
| 0003b6c0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b6d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b6e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b6 | 0003b6e0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b700:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b6f0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b700:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b710:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b720:· | 0003b720:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b730:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b740:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b750:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b760:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b730:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b740:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b750:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b760:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b770:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b780:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b790:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b7a0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b7b0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b7c0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b7d0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b7e0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b7f0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b800:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b810:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b820:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b830:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b840:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b850:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b860:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b870:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b880:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003b890:·4c2d·3039·2d36·3531·3031·300a·2020·2d20··L-09-651010.··-· | |||
| 0003b8a0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b8b0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b8c0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b8d0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b8e0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b8f0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b900:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b910:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b920:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b930:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b940:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b950:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b960:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b970:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b980:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b990:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b9a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b9b0:·646d·3834·3239·2220·7461·6269·6e64·6578··dm8429"·tabindex | |||
| 0003b9c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b9d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b9e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b9f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003ba00:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003ba10:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003ba20:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003ba30:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ba40:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ba50:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ba60:·3834·3239·223e·3c74·6162·6c65·2063·6c61··8429"><table·cla | |||
| 0003ba70:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003ba80:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003ba90:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003baa0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003bab0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003bac0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003bad0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003bae0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003baf0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bb00:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003bb10:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bb20:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003bb30:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b | 0003b770:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003b780:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b790:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b7a0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b7b0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b7c0:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b | 0003b7d0:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | ||
| 0003b7e0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b7f0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b800:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b810:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003bb70:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003bb80:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003bb90:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| Max diff block lines reached; 10635224/10667432 bytes (99.70%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 53 lines modified | Offset 122, 26 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8c_\x8i_\x8s············6.1.1 | 126 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | -·name:·Ensure·aide·is·installed | ||
| 135 | ··package: | ||
| 136 | ····name:·aide | ||
| 137 | ····state:·present | ||
| 138 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 139 | ··tags: | ||
| 140 | ··-·CJIS-5.10.1.3 | ||
| 141 | ··-·DISA-STIG-RHEL-09-651010 | ||
| 142 | ··-·NIST-800-53-CM-6(a) | ||
| 143 | ··-·PCI-DSS-Req-11.5 | ||
| 144 | ··-·PCI-DSSv4-11.5.2 | ||
| 145 | ··-·enable_strategy | ||
| 146 | ··-·low_complexity | ||
| 147 | ··-·low_disruption | ||
| 148 | ··-·medium_severity | ||
| 149 | ··-·no_reboot_needed | ||
| 150 | ··-·package_aide_installed | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | include·install_aide | 134 | include·install_aide |
| 157 | class·install_aide·{ | 135 | class·install_aide·{ |
| 158 | ··package·{·'aide': | 136 | ··package·{·'aide': |
| 159 | ····ensure·=>·'installed', | 137 | ····ensure·=>·'installed', |
| 160 | ··} | 138 | ··} |
| 161 | } | 139 | } |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | #·Remediation·is·applicable·only·in·certain·platforms | 145 | #·Remediation·is·applicable·only·in·certain·platforms |
| 172 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 183, 21 lines modified | Offset 156, 48 lines modified | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | package·install·aide | 161 | package·install·aide |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 194 | package·--add=aide | 171 | package·--add=aide |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | -·name:·Ensure·aide·is·installed | ||
| 178 | ··package: | ||
| 179 | ····name:·aide | ||
| 180 | ····state:·present | ||
| 181 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 182 | ··tags: | ||
| 183 | ··-·CJIS-5.10.1.3 | ||
| 184 | ··-·DISA-STIG-RHEL-09-651010 | ||
| 185 | ··-·NIST-800-53-CM-6(a) | ||
| 186 | ··-·PCI-DSS-Req-11.5 | ||
| 187 | ··-·PCI-DSSv4-11.5.2 | ||
| 188 | ··-·enable_strategy | ||
| 189 | ··-·low_complexity | ||
| 190 | ··-·low_disruption | ||
| 191 | ··-·medium_severity | ||
| 192 | ··-·no_reboot_needed | ||
| 193 | ··-·package_aide_installed | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/sbin/aide·--init | 196 | $·sudo·/usr/sbin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 200 | To·initiate·a·manual·check,·run·the·following·command: | 199 | To·initiate·a·manual·check,·run·the·following·command: |
| 201 | $·sudo·/usr/sbin/aide·--check | 200 | $·sudo·/usr/sbin/aide·--check |
| Offset 215, 14 lines modified | Offset 215, 28 lines modified | ||
| 215 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 215 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 216 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 216 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 217 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 217 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 218 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 218 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 219 | ············_\x8c_\x8i_\x8s············6.1.1 | 219 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 221 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 221 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1298807/1305009 bytes (99.52%) of diff not shown. | |||
| Offset 14415, 15 lines modified | Offset 14415, 15 lines modified | ||
| 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00038540:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00038550:·3131·2d30·3 | 00038550:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15192, 236 lines modified | Offset 15192, 236 lines modified | ||
| 0003b570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b580:·646d·3834·3238·2220·7461·6269·6e64·6578··dm8428"·tabindex | 0003b580:·646d·3834·3238·2220·7461·6269·6e64·6578··dm8428"·tabindex | ||
| 0003b590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b5e0:·6d65·6469·6174·696f·6e20· | 0003b5e0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | ||
| 0003b5f0:· | 0003b5f0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b600:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b610:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b620:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b630:·3834·3238·223e·3c74·6162·6c65·2063·6c61··8428"><table·cla | |||
| 0003b640:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b600:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b610:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b620:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b630:·6d38·3432·3822·3e3c·7461·626c·6520·636c··m8428"><table·cl | |||
| 0003b640:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b650:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b6 | 0003b650:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b660:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b670:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b680:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b690:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b6a0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b6b0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b670:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b680:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b690:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b6a0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b6b0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b6c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b6d0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b6e0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b6f0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b700:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b | 0003b6c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b6d0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b720:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b730:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b740:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b750:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b760:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b770:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b780:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b790:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b7a0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b7b0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b7c0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b7d0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b7e0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b7f0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b800:·4947·2d52·4845·4c2d·3039·2d36·3531·3031··IG-RHEL-09-65101 | |||
| 0003b810:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003b820:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b830:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b840:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b850:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b860:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b870:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b880:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b890:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b8a0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b8b0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b8c0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b8d0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b8e0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b8f0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b900:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b910:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b920:·6574·3d22·2369·646d·3834·3239·2220·7461··et="#idm8429"·ta | |||
| 0003b930:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b940:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b950:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b960:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b970:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b980:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b990:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b9a0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b9b0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b9c0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b9d0:·643d·2269·646d·3834·3239·223e·3c74·6162··d="idm8429"><tab | |||
| 0003b9e0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b9f0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ba00:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ba10:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ba20:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ba30:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ba40:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ba50:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003ba60:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ba70:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ba80:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003ba90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003baa0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b | 0003b6e0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b6f0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b700:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b710:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b720:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b730:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b740:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b750:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b760:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b770:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b780:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003bac0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003bad0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003bae0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003baf0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| Max diff block lines reached; 10254853/10287199 bytes (99.69%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Workstation | 60 | ··············Workstation |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 121, 53 lines modified | Offset 121, 26 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | -·name:·Ensure·aide·is·installed | ||
| 134 | ··package: | ||
| 135 | ····name:·aide | ||
| 136 | ····state:·present | ||
| 137 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 138 | ··tags: | ||
| 139 | ··-·CJIS-5.10.1.3 | ||
| 140 | ··-·DISA-STIG-RHEL-09-651010 | ||
| 141 | ··-·NIST-800-53-CM-6(a) | ||
| 142 | ··-·PCI-DSS-Req-11.5 | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | ||
| 144 | ··-·enable_strategy | ||
| 145 | ··-·low_complexity | ||
| 146 | ··-·low_disruption | ||
| 147 | ··-·medium_severity | ||
| 148 | ··-·no_reboot_needed | ||
| 149 | ··-·package_aide_installed | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | include·install_aide | 133 | include·install_aide |
| 156 | class·install_aide·{ | 134 | class·install_aide·{ |
| 157 | ··package·{·'aide': | 135 | ··package·{·'aide': |
| 158 | ····ensure·=>·'installed', | 136 | ····ensure·=>·'installed', |
| 159 | ··} | 137 | ··} |
| 160 | } | 138 | } |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | 144 | #·Remediation·is·applicable·only·in·certain·platforms |
| 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 145 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 182, 21 lines modified | Offset 155, 48 lines modified | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | package·install·aide | 160 | package·install·aide |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 193 | package·--add=aide | 170 | package·--add=aide |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | -·name:·Ensure·aide·is·installed | ||
| 177 | ··package: | ||
| 178 | ····name:·aide | ||
| 179 | ····state:·present | ||
| 180 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 181 | ··tags: | ||
| 182 | ··-·CJIS-5.10.1.3 | ||
| 183 | ··-·DISA-STIG-RHEL-09-651010 | ||
| 184 | ··-·NIST-800-53-CM-6(a) | ||
| 185 | ··-·PCI-DSS-Req-11.5 | ||
| 186 | ··-·PCI-DSSv4-11.5.2 | ||
| 187 | ··-·enable_strategy | ||
| 188 | ··-·low_complexity | ||
| 189 | ··-·low_disruption | ||
| 190 | ··-·medium_severity | ||
| 191 | ··-·no_reboot_needed | ||
| 192 | ··-·package_aide_installed | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·/usr/sbin/aide·--init | 195 | $·sudo·/usr/sbin/aide·--init |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 199 | To·initiate·a·manual·check,·run·the·following·command: | 198 | To·initiate·a·manual·check,·run·the·following·command: |
| 200 | $·sudo·/usr/sbin/aide·--check | 199 | $·sudo·/usr/sbin/aide·--check |
| Offset 214, 14 lines modified | Offset 214, 28 lines modified | ||
| 214 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 214 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 216 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 216 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 217 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 217 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 218 | ············_\x8c_\x8i_\x8s············6.1.1 | 218 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 219 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 219 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1244495/1250628 bytes (99.51%) of diff not shown. | |||
| Offset 14415, 15 lines modified | Offset 14415, 15 lines modified | ||
| 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00038540:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00038550:·3131·2d30·3 | 00038550:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15224, 235 lines modified | Offset 15224, 235 lines modified | ||
| 0003b770:·6172·6765·743d·2223·6964·6d38·3432·3822··arget="#idm8428" | 0003b770:·6172·6765·743d·2223·6964·6d38·3432·3822··arget="#idm8428" | ||
| 0003b780:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b780:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b790:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b790:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b7a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b7a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b7b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b7b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b7c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b7c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b7d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b7d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b7e0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b7f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b800:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b810:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b820:·2220·6964·3d22·6964·6d38·3432·3822·3e3c··"·id="idm8428">< | |||
| 0003b830:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b840:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b7e0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b7f0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b800:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b810:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b820:·6522·2069·643d·2269·646d·3834·3238·223e··e"·id="idm8428"> | |||
| 0003b830:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b840:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b850:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b8 | 0003b850:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003b860:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b870:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b880:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b870:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b880:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b890:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b8a0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b8b0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b8c0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b8d0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b8e0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b8f0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b900:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b910:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b920:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b930:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b940:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b950:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b960:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b970:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003b980:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003b990:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003b9a0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003b9b0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003b9c0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003b9d0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003b9e0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b9f0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003ba00:·2d30·392d·3635·3130·3130·0a20·202d·204e··-09-651010.··-·N | |||
| 0003ba10:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003ba20:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003ba30:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003ba40:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003ba50:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003ba60:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003ba70:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003ba80:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003ba90:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003baa0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003bab0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003bac0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003bad0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003bae0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003baf0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003bb00:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003bb10:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003bb20:·6d38·3432·3922·2074·6162·696e·6465·783d··m8429"·tabindex= | |||
| 0003bb30:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bb40:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bb50:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bb60:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003bb70:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003bb80:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003bb90:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003bba0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bbb0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bbc0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003bbd0:·3432·3922·3e3c·7461·626c·6520·636c·6173··429"><table·clas | |||
| 0003bbe0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bbf0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bc00:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bc10:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003bc20:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003bc30:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bc40:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003bc50:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003bc60:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bc70:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003bc80:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003bc90:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003bca0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b | 0003b890:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b8a0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b8b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b8c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b8d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b8e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b8f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b900:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b910:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b920:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b930:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b | 0003b940:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | ||
| 0003b950:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b960:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b970:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b980:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003bce0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| Max diff block lines reached; 24812677/24844885 bytes (99.87%) of diff not shown. | |||
| Offset 14449, 15 lines modified | Offset 14449, 15 lines modified | ||
| 00038700:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038700:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038710:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038710:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038720:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038720:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038730:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038730:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038740:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038740:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038750:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038750:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038760:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038760:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00038770:·3032·342d·3131·2d30·3 | 00038770:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 00038780:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00038780:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00038790:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00038790:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000387a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000387a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000387b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000387b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000387c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000387c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000387d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000387d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000387e0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 000387e0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15177, 196 lines modified | Offset 15177, 196 lines modified | ||
| 0003b480:·6765·743d·2223·6964·6d38·3933·3122·2074··get="#idm8931"·t | 0003b480:·6765·743d·2223·6964·6d38·3933·3122·2074··get="#idm8931"·t | ||
| 0003b490:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b490:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b4a0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b4a0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b4b0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b4b0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b4c0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b4c0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b4d0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b4d0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b4e0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b4e0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b4f0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b500:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b510:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b520:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b530:·3d22·6964·6d38·3933·3122·3e3c·7072·653e··="idm8931"><pre> | |||
| 0003b540:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003b550:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003b560:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003b570:·6e20·706c·6174·666f·726d·730a·6966·2028··n·platforms.if·( | |||
| 0003b580:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b590:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b5a0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b5b0:·6e74·6169·6e65·7265·6e76·205d·2026·616d··ntainerenv·]·&am | |||
| 0003b5c0:·703b·2661·6d70·3b20·2120·2820·5b20·2224··p;&·!·(·[·"$ | |||
| 0003b4f0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b500:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b510:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b520:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b530:·2069·643d·2269·646d·3839·3331·223e·3c74···id="idm8931"><t | |||
| 0003b540:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b550:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b560:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b570:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b580:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b590:·7479·3a3c·2f74·683e·3c74·643e·6d65·6469··ty:</th><td>medi | |||
| 0003b5a0:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | |||
| 0003b5b0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b5c0:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | |||
| 0003b5d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b5e0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b5f0:·7472·7565·3c2f·7464·3e3c·2f74·723e·3c74··true</td></tr><t | |||
| 0003b600:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b610:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003b620:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b630:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b640:·616d·653a·2043·6865·636b·2074·6f20·7365··ame:·Check·to·se | |||
| 0003b650:·6520·7468·6520·6375·7272·656e·7420·7374··e·the·current·st | |||
| 0003b660:·6174·7573·206f·6620·4649·5053·206d·6f64··atus·of·FIPS·mod | |||
| 0003b670:·650a·2020·636f·6d6d·616e·643a·202f·7573··e.··command:·/us | |||
| 0003b680:·722f·6269·6e2f·6669·7073·2d6d·6f64·652d··r/bin/fips-mode- | |||
| 0003b690:·7365·7475·7020·2d2d·6368·6563·6b0a·2020··setup·--check.·· | |||
| 0003b6a0:·7265·6769·7374·6572·3a20·6973·5f66·6970··register:·is_fip | |||
| 0003b6b0:·735f·656e·6162·6c65·640a·2020·6368·616e··s_enabled.··chan | |||
| 0003b6c0:·6765·645f·7768·656e·3a20·6661·6c73·650a··ged_when:·false. | |||
| 0003b6d0:·2020·6661·696c·6564·5f77·6865·6e3a·2066····failed_when:·f | |||
| 0003b6e0:·616c·7365·0a20·2077·6865·6e3a·2028·2061··alse.··when:·(·a | |||
| 0003b6f0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b700:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b710:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b720:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b730:·6f64·6d61·6e22·2c0a·2020·2020·2263·6f6e··odman",.····"con | |||
| 0003b740:·7461·696e·6572·225d·2061·6e64·206e·6f74··tainer"]·and·not | |||
| 0003b750:·2028·206c·6f6f·6b75·7028·2265·6e76·222c···(·lookup("env", | |||
| 0003b760:·2022·636f·6e74·6169·6e65·7222·2920·3d3d···"container")·== | |||
| 0003b770:·2022·6277·7261·702d·6f73·6275·696c·6422···"bwrap-osbuild" | |||
| 0003b780:·2029·2029·0a20·2074·6167·733a·0a20·202d···)·).··tags:.··- | |||
| 0003b790:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003b7a0:·3039·2d36·3731·3031·300a·2020·2d20·4e49··09-671010.··-·NI | |||
| 0003b7b0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b7c0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b7d0:·332d·4941·2d37·0a20·202d·204e·4953·542d··3-IA-7.··-·NIST- | |||
| 0003b7e0:·3830·302d·3533·2d53·432d·3132·0a20·202d··800-53-SC-12.··- | |||
| 0003b7f0:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003b800:·3132·2832·290a·2020·2d20·4e49·5354·2d38··12(2).··-·NIST-8 | |||
| 0003b810:·3030·2d35·332d·5343·2d31·3228·3329·0a20··00-53-SC-12(3).· | |||
| 0003b820:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b830:·432d·3133·0a20·202d·2065·6e61·626c·655f··C-13.··-·enable_ | |||
| 0003b840:·6472·6163·7574·5f66·6970·735f·6d6f·6475··dracut_fips_modu | |||
| 0003b850:·6c65·0a20·202d·2068·6967·685f·7365·7665··le.··-·high_seve | |||
| 0003b860:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | |||
| 0003b870:·636f·6d70·6c65·7869·7479·0a20·202d·206d··complexity.··-·m | |||
| 0003b880:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | |||
| 0003b890:·0a20·202d·2072·6562·6f6f·745f·7265·7175··.··-·reboot_requ | |||
| 0003b8a0:·6972·6564·0a20·202d·2072·6573·7472·6963··ired.··-·restric | |||
| 0003b8b0:·745f·7374·7261·7465·6779·0a0a·2d20·6e61··t_strategy..-·na | |||
| 0003b8c0:·6d65·3a20·456e·6162·6c65·2046·4950·5320··me:·Enable·FIPS· | |||
| 0003b8d0:·6d6f·6465·0a20·2063·6f6d·6d61·6e64·3a20··mode.··command:· | |||
| 0003b8e0:·2f75·7372·2f62·696e·2f66·6970·732d·6d6f··/usr/bin/fips-mo | |||
| 0003b8f0:·6465·2d73·6574·7570·202d·2d65·6e61·626c··de-setup·--enabl | |||
| 0003b900:·650a·2020·7768·656e·3a0a·2020·2d20·2820··e.··when:.··-·(· | |||
| 0003b910:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b920:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b930:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b940:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b950:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b960:·6e65·7222·5d0a·2020·2020·616e·6420·6e6f··ner"].····and·no | |||
| 0003b970:·7420·2820·6c6f·6f6b·7570·2822·656e·7622··t·(·lookup("env" | |||
| 0003b | 0003b5d0:·7b63·6f6e·7461·696e·6572·3a2d·7d22·203d··{container:-}"·= | ||
| 0003b | 0003b5e0:·3d20·2262·7772·6170·2d6f·7362·7569·6c64··=·"bwrap-osbuild | ||
| 0003b5f0:·2220·5d20·2920·293b·2074·6865·6e0a·0a66··"·]·)·);·then..f | |||
| 0003b600:·6970·732d·6d6f·6465·2d73·6574·7570·202d··ips-mode-setup·- | |||
| 0003b610:·2d65·6e61·626c·650a·4649·5053·5f43·4f4e··-enable.FIPS_CON | |||
| 0003b620:·463d·222f·6574·632f·6472·6163·7574·2e63··F="/etc/dracut.c | |||
| 0003b630:·6f6e·662e·642f·3430·2d66·6970·732e·636f··onf.d/40-fips.co | |||
| 0003b640:·6e66·220a·6966·2021·2067·7265·7020·225e··nf".if·!·grep·"^ | |||
| 0003b9a0:·2220·2920·290a·2020·2d20·6973·5f66·6970··"·)·).··-·is_fip | |||
| 0003b9b0:·735f·656e·6162·6c65·642e·7374·646f·7574··s_enabled.stdout | |||
| 0003b9c0:·2e66·696e·6428·2746·4950·5320·6d6f·6465··.find('FIPS·mode | |||
| 0003b9d0:·2069·7320·656e·6162·6c65·642e·2729·203d···is·enabled.')·= | |||
| 0003b9e0:·3d20·2d31·0a20·2074·6167·733a·0a20·202d··=·-1.··tags:.··- | |||
| 0003b9f0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003ba00:·3039·2d36·3731·3031·300a·2020·2d20·4e49··09-671010.··-·NI | |||
| 0003ba10:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003ba20:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| Max diff block lines reached; 6229686/6256512 bytes (99.57%) of diff not shown. | |||
| Offset 68, 15 lines modified | Offset 68, 15 lines modified | ||
| 68 | ··············Systems·and·Organizations·(NIST·800-171) | 68 | ··············Systems·and·Organizations·(NIST·800-171) |
| 69 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 69 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 70 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 70 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:9 | 71 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 72 | ····*·cpe:/o:centos:centos:9 | 72 | ····*·cpe:/o:centos:centos:9 |
| 73 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 73 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 74 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 74 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 75 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 75 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 76 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 77 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 78 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 79 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 79 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 80 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 80 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 81 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 81 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 82 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 82 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 117, 14 lines modified | Offset 117, 27 lines modified | ||
| 117 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 117 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 118 | ············_\x8i_\x8s_\x8m······1446 | 118 | ············_\x8i_\x8s_\x8m······1446 |
| 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 120 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 120 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 121 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 121 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 125 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 126 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 127 | fips-mode-setup·--enable | ||
| 128 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 129 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 130 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 131 | fi | ||
| 132 | else | ||
| 133 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 134 | fi | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 129 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 140 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 130 | ··command:·/usr/bin/fips-mode-setup·--check | 141 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 185, 27 lines modified | Offset 198, 14 lines modified | ||
| 185 | ··-·NIST-800-53-SC-13 | 198 | ··-·NIST-800-53-SC-13 |
| 186 | ··-·enable_dracut_fips_module | 199 | ··-·enable_dracut_fips_module |
| 187 | ··-·high_severity | 200 | ··-·high_severity |
| 188 | ··-·medium_complexity | 201 | ··-·medium_complexity |
| 189 | ··-·medium_disruption | 202 | ··-·medium_disruption |
| 190 | ··-·reboot_required | 203 | ··-·reboot_required |
| 191 | ··-·restrict_strategy | 204 | ··-·restrict_strategy |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 195 | fips-mode-setup·--enable | ||
| 196 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 197 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 198 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 199 | fi | ||
| 200 | else | ||
| 201 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 202 | fi | ||
| 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 204 | To·enable·FIPS·mode,·run·the·following·command: | 206 | To·enable·FIPS·mode,·run·the·following·command: |
| 205 | fips-mode-setup·--enable | 207 | fips-mode-setup·--enable |
| 206 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 208 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 207 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 209 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 208 | ····*·Creating·/etc/system-fips | 210 | ····*·Creating·/etc/system-fips |
| Offset 219, 14 lines modified | Offset 219, 45 lines modified | ||
| 219 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 219 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 220 | ············_\x8i_\x8s_\x8m······1446 | 220 | ············_\x8i_\x8s_\x8m······1446 |
| 221 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 221 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 222 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 222 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 223 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 223 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 227 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 228 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 229 | var_system_crypto_policy='FIPS' | ||
| 230 | fips-mode-setup·--enable | ||
| 231 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 232 | rc=$? | ||
| 233 | if·test·"$rc"·=·127;·then | ||
| 234 | » echo·"$stderr_of_call"·>&2 | ||
| 235 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 236 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 237 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 238 | » false··#·end·with·an·error·code | ||
| 239 | elif·test·"$rc"·!=·0;·then | ||
| 240 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 241 | » false··#·end·with·an·error·code | ||
| 242 | fi | ||
| 243 | else | ||
| 244 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 245 | fi | ||
| 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 247 | [customizations] | ||
| 248 | fips·=·true | ||
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 249 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 250 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 251 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 252 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 253 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 231 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 254 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 232 | ··set_fact: | 255 | ··set_fact: |
| Offset 326, 45 lines modified | Offset 357, 14 lines modified | ||
| 326 | ··-·NIST-800-53-SC-13 | 357 | ··-·NIST-800-53-SC-13 |
| 327 | ··-·enable_fips_mode | 358 | ··-·enable_fips_mode |
| 328 | ··-·high_severity | 359 | ··-·high_severity |
| 329 | ··-·medium_complexity | 360 | ··-·medium_complexity |
| 330 | ··-·medium_disruption | 361 | ··-·medium_disruption |
| 331 | ··-·reboot_required | 362 | ··-·reboot_required |
| 332 | ··-·restrict_strategy | 363 | ··-·restrict_strategy |
| 333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 880303/887283 bytes (99.21%) of diff not shown. | |||
| Offset 14415, 15 lines modified | Offset 14415, 15 lines modified | ||
| 000384e0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 000384e0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 000384f0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 000384f0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038500:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038500:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038510:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038510:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038520:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038520:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | 00038540:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | ||
| 00038550:·312d·303 | 00038550:·312d·3037·290a·2020·2020·2020·2020·2020··1-07).·········· | ||
| 00038560:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00038560:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00038570:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00038570:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00038580:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00038580:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00038590:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00038590:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 000385a0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 000385a0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 000385b0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 000385b0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 000385c0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 000385c0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15267, 301 lines modified | Offset 15267, 301 lines modified | ||
| 0003ba20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ba20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ba30:·2223·6964·6d38·3038·3822·2074·6162·696e··"#idm8088"·tabin | 0003ba30:·2223·6964·6d38·3038·3822·2074·6162·696e··"#idm8088"·tabin | ||
| 0003ba40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ba40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ba50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ba50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ba60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ba60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ba70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ba70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ba80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ba80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003ba90:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003baa0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003bab0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bac0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003bad0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bae0:·6d38·3038·3822·3e3c·7072·653e·3c63·6f64··m8088"><pre><cod | |||
| 0003baf0:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003bb00:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003bb10:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003bb20:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003bb30:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003bb40:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003bb50:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003bb60:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003bb70:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003bb80:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003bb90:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003bba0:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003bbb0:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003bbc0:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003bbd0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003bbe0:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003bbf0:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003bc00:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003bc10:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003bc20:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003bc30:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003bc40:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003bc50:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003bc60:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003bc70:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003bc80:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003bc90:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003bca0:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003bcb0:·2027·2922·0a0a·2020·2020·0a20·2020·2064···')"..····.····d | |||
| 0003bcc0:·6e66·2072·6569·6e73·7461·6c6c·202d·7920··nf·reinstall·-y· | |||
| 0003bcd0:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003bce0:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003bcf0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bd00:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bd10:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bd20:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bd30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bd40:·2223·6964·6d38·3038·3922·2074·6162·696e··"#idm8089"·tabin | |||
| 0003bd50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bd60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bd70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bd80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bd90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b | 0003bda0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b | 0003bdb0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b | 0003bdc0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003bdd0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003bde0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003bdf0:·2269·646d·3830·3839·223e·3c74·6162·6c65··"idm8089"><table | ||
| 0003b | 0003be00:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003be10:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003be20:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003be30:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003be40:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003be50:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003be60:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003be70:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003be80:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003be90:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003bea0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003beb0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003bec0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003bed0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b | 0003bee0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b | 0003bef0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b | 0003bf00:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b | 0003bf10:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b | 0003bf20:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b | 0003bf30:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b | 0003bf40:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b | 0003bf50:·696e·7374·616c·6c5f·636d·643a·2064·6e66··install_cmd:·dnf | ||
| 0003b | 0003bf60:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b | 0003bf70:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003b | 0003bf80:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b | 0003bf90:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b | 0003bfa0:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b | 0003bfb0:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b | 0003bfc0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b | 0003bfd0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b | 0003bfe0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b | 0003bff0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003 | 0003c000:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003 | 0003c010:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003 | 0003c020:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003 | 0003c030:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003 | 0003c040:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003 | 0003c050:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003 | 0003c060:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003 | 0003c070:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003 | 0003c080:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003 | 0003c090:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003 | 0003c0a0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003 | 0003c0b0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003 | 0003c0c0:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003 | 0003c0d0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003 | 0003c0e0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003 | 0003c0f0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003 | 0003c100:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| Max diff block lines reached; 6545210/6570794 bytes (99.61%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 121, 14 lines modified | Offset 121, 27 lines modified | ||
| 121 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 121 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 122 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 122 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 130 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 131 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 132 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 133 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 134 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 135 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 141 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 134 | ··set_fact: | 142 | ··set_fact: |
| Offset 255, 27 lines modified | Offset 268, 14 lines modified | ||
| 255 | ··-·PCI-DSSv4-11.5.2 | 268 | ··-·PCI-DSSv4-11.5.2 |
| 256 | ··-·high_complexity | 269 | ··-·high_complexity |
| 257 | ··-·high_severity | 270 | ··-·high_severity |
| 258 | ··-·medium_disruption | 271 | ··-·medium_disruption |
| 259 | ··-·no_reboot_needed | 272 | ··-·no_reboot_needed |
| 260 | ··-·restrict_strategy | 273 | ··-·restrict_strategy |
| 261 | ··-·rpm_verify_hashes | 274 | ··-·rpm_verify_hashes |
| 262 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 263 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 264 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 265 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 266 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 267 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 268 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 269 | fi | ||
| 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 275 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 271 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 276 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 272 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 277 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 273 | run·the·following·command·to·determine·which·package·owns·it: | 278 | run·the·following·command·to·determine·which·package·owns·it: |
| 274 | $·rpm·-qf·FILENAME | 279 | $·rpm·-qf·FILENAME |
| 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 280 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 276 | $·sudo·rpm·--setugids·PACKAGENAME | 281 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 294, 14 lines modified | Offset 294, 40 lines modified | ||
| 294 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 294 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 295 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 295 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 296 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 296 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 297 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 297 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 298 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 298 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 299 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 299 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 300 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 300 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 306 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 307 | declare·-A·SETPERMS_RPM_DICT | ||
| 308 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 309 | #·is·expected·by·the·RPM·database | ||
| 310 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 311 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 312 | do | ||
| 313 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 314 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 315 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 316 | done | ||
| 317 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 318 | #·correct·values | ||
| 319 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 320 | do | ||
| 321 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 322 | done | ||
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 306 | -·name:·Read·list·of·files·with·incorrect·ownership | 328 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 307 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 329 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 376, 40 lines modified | Offset 402, 14 lines modified | ||
| 376 | ··-·PCI-DSSv4-11.5.2 | 402 | ··-·PCI-DSSv4-11.5.2 |
| 377 | ··-·high_complexity | 403 | ··-·high_complexity |
| 378 | ··-·high_severity | 404 | ··-·high_severity |
| 379 | ··-·medium_disruption | 405 | ··-·medium_disruption |
| 380 | ··-·no_reboot_needed | 406 | ··-·no_reboot_needed |
| 381 | ··-·restrict_strategy | 407 | ··-·restrict_strategy |
| 382 | ··-·rpm_verify_ownership | 408 | ··-·rpm_verify_ownership |
| 383 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 384 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 385 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 386 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 387 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 388 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 691636/699469 bytes (98.88%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038610:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038620:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038620:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038630:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038630:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038640:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038640:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038650:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038650:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038660:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038660:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038670:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038670:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038680:·6173·206f·6620·3230·3234·2d31·312d·303 | 00038680:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00038690:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038690:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 000386a0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 000386a0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000386b0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000386b0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000386c0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000386c0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000386d0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000386d0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000386e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000386e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000386f0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000386f0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15288, 301 lines modified | Offset 15288, 301 lines modified | ||
| 0003bb70:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003bb70:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003bb80:·2223·6964·6d38·3038·3822·2074·6162·696e··"#idm8088"·tabin | 0003bb80:·2223·6964·6d38·3038·3822·2074·6162·696e··"#idm8088"·tabin | ||
| 0003bb90:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003bb90:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003bba0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003bba0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003bbb0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003bbb0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003bbc0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003bbc0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003bbd0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003bbd0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003bbe0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003bbf0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003bc00:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bc10:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003bc20:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bc30:·6d38·3038·3822·3e3c·7072·653e·3c63·6f64··m8088"><pre><cod | |||
| 0003bc40:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003bc50:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003bc60:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003bc70:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003bc80:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003bc90:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003bca0:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003bcb0:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003bcc0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003bcd0:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003bce0:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003bcf0:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003bd00:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003bd10:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003bd20:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003bd30:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003bd40:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003bd50:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003bd60:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003bd70:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003bd80:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003bd90:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003bda0:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003bdb0:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003bdc0:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003bdd0:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003bde0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003bdf0:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003be00:·2027·2922·0a0a·2020·2020·0a20·2020·2064···')"..····.····d | |||
| 0003be10:·6e66·2072·6569·6e73·7461·6c6c·202d·7920··nf·reinstall·-y· | |||
| 0003be20:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003be30:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003be40:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003be50:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003be60:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003be70:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003be80:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003be90:·2223·6964·6d38·3038·3922·2074·6162·696e··"#idm8089"·tabin | |||
| 0003bea0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003beb0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bec0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bed0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bee0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b | 0003bef0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b | 0003bf00:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b | 0003bf10:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003bf20:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003bf30:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003bf40:·2269·646d·3830·3839·223e·3c74·6162·6c65··"idm8089"><table | ||
| 0003b | 0003bf50:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003bf60:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003bf70:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003bf80:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003bf90:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003bfa0:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003bfb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003bfc0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003bfd0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003bfe0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003bff0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003 | 0003c000:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 0003c010:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003 | 0003c020:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003 | 0003c030:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003 | 0003c040:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003 | 0003c050:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003 | 0003c060:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003 | 0003c070:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003 | 0003c080:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003 | 0003c090:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003 | 0003c0a0:·696e·7374·616c·6c5f·636d·643a·2064·6e66··install_cmd:·dnf | ||
| 0003 | 0003c0b0:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003 | 0003c0c0:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003 | 0003c0d0:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003 | 0003c0e0:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003 | 0003c0f0:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003 | 0003c100:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003 | 0003c110:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003 | 0003c120:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003 | 0003c130:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003 | 0003c140:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003 | 0003c150:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003 | 0003c160:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003 | 0003c170:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003 | 0003c180:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003 | 0003c190:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003 | 0003c1a0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003 | 0003c1b0:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003 | 0003c1c0:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003 | 0003c1d0:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003 | 0003c1e0:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003 | 0003c1f0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003 | 0003c200:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003 | 0003c210:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003 | 0003c220:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003 | 0003c230:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003 | 0003c240:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003 | 0003c250:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| Max diff block lines reached; 17075374/17100958 bytes (99.85%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:9 | 67 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 68 | ····*·cpe:/o:centos:centos:9 | 68 | ····*·cpe:/o:centos:centos:9 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 126, 14 lines modified | Offset 126, 27 lines modified | ||
| 126 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 126 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 127 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 127 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 128 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 128 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 129 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 129 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 131 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 131 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 135 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 136 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 137 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 138 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 139 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 140 | fi | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 138 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 146 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 139 | ··set_fact: | 147 | ··set_fact: |
| Offset 260, 27 lines modified | Offset 273, 14 lines modified | ||
| 260 | ··-·PCI-DSSv4-11.5.2 | 273 | ··-·PCI-DSSv4-11.5.2 |
| 261 | ··-·high_complexity | 274 | ··-·high_complexity |
| 262 | ··-·high_severity | 275 | ··-·high_severity |
| 263 | ··-·medium_disruption | 276 | ··-·medium_disruption |
| 264 | ··-·no_reboot_needed | 277 | ··-·no_reboot_needed |
| 265 | ··-·restrict_strategy | 278 | ··-·restrict_strategy |
| 266 | ··-·rpm_verify_hashes | 279 | ··-·rpm_verify_hashes |
| 267 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 268 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 269 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 270 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 271 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 272 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 273 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 274 | fi | ||
| 275 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 280 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 276 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 281 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 277 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 282 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 278 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 283 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 279 | $·rpm·-qf·FILENAME | 284 | $·rpm·-qf·FILENAME |
| 280 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 285 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 301, 14 lines modified | Offset 301, 44 lines modified | ||
| 301 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 301 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 302 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 302 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 303 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 303 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 304 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 304 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 305 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 305 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 313 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 314 | declare·-A·SETPERMS_RPM_DICT | ||
| 315 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 316 | #·is·expected·by·the·RPM·database | ||
| 317 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 318 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 319 | do | ||
| 320 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 321 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 322 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 323 | ········do | ||
| 324 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 325 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 326 | ········done | ||
| 327 | done | ||
| 328 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 329 | #·correct·values | ||
| 330 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 331 | do | ||
| 332 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 333 | done | ||
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 313 | -·name:·Read·list·of·files·with·incorrect·permissions | 339 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 314 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 340 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 386, 44 lines modified | Offset 416, 14 lines modified | ||
| 386 | ··-·PCI-DSSv4-11.5.2 | 416 | ··-·PCI-DSSv4-11.5.2 |
| 387 | ··-·high_complexity | 417 | ··-·high_complexity |
| 388 | ··-·high_severity | 418 | ··-·high_severity |
| 389 | ··-·medium_disruption | 419 | ··-·medium_disruption |
| 390 | ··-·no_reboot_needed | 420 | ··-·no_reboot_needed |
| 391 | ··-·restrict_strategy | 421 | ··-·restrict_strategy |
| 392 | ··-·rpm_verify_permissions | 422 | ··-·rpm_verify_permissions |
| 393 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 394 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 395 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1311441/1319665 bytes (99.38%) of diff not shown. | |||
| Offset 14427, 15 lines modified | Offset 14427, 15 lines modified | ||
| 000385a0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000385a0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000385b0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000385b0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000385c0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000385c0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000385d0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000385d0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 000385e0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 000385e0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 000385f0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 000385f0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038600:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038600:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038610:·6173·206f·6620·3230·3234·2d31·312d·303 | 00038610:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00038620:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038620:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038630:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038630:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038640:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038640:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038650:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038650:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038660:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038660:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038670:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038670:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038680:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038680:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15302, 300 lines modified | Offset 15302, 300 lines modified | ||
| 0003bc50:·7267·6574·3d22·2369·646d·3830·3838·2220··rget="#idm8088"· | 0003bc50:·7267·6574·3d22·2369·646d·3830·3838·2220··rget="#idm8088"· | ||
| 0003bc60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bc60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bc70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bc70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bc80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bc80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bc90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bc90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bca0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bca0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bcb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bcb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bcc0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003bcd0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bce0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bcf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bd00:·643d·2269·646d·3830·3838·223e·3c70·7265··d="idm8088"><pre | |||
| 0003bd10:·3e3c·636f·6465·3e0a·2320·4669·6e64·2077··><code>.#·Find·w | |||
| 0003bd20:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | |||
| 0003bd30:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | |||
| 0003bd40:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | |||
| 0003bd50:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | |||
| 0003bd60:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | |||
| 0003bd70:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | |||
| 0003bd80:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | |||
| 0003bd90:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | |||
| 0003bda0:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | |||
| 0003bdb0:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | |||
| 0003bdc0:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | |||
| 0003bdd0:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | |||
| 0003bde0:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | |||
| 0003bdf0:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | |||
| 0003be00:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | |||
| 0003be10:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | |||
| 0003be20:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | |||
| 0003be30:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | |||
| 0003be40:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | |||
| 0003be50:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | |||
| 0003be60:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | |||
| 0003be70:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | |||
| 0003be80:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | |||
| 0003be90:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | |||
| 0003bea0:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | |||
| 0003beb0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003bec0:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | |||
| 0003bed0:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | |||
| 0003bee0:·2020·2020·646e·6620·7265·696e·7374·616c······dnf·reinstal | |||
| 0003bef0:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | |||
| 0003bf00:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | |||
| 0003bf10:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003bf20:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bf30:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bf40:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bf50:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bf60:·7267·6574·3d22·2369·646d·3830·3839·2220··rget="#idm8089"· | |||
| 0003bf70:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bf80:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bf90:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bfa0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bfb0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bfc0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b | 0003bfd0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003b | 0003bfe0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b | 0003bff0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003 | 0003c000:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003 | 0003c010:·2220·6964·3d22·6964·6d38·3038·3922·3e3c··"·id="idm8089">< | ||
| 0003 | 0003c020:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003 | 0003c030:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003 | 0003c040:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003 | 0003c050:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003 | 0003c060:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003 | 0003c070:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003 | 0003c080:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003 | 0003c090:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003 | 0003c0a0:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003 | 0003c0b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003 | 0003c0c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003 | 0003c0d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003 | 0003c0e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003 | 0003c0f0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003 | 0003c100:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003 | 0003c110:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003 | 0003c120:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003 | 0003c130:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| 0003 | 0003c140:·7265·696e·7374·616c·6c20·636f·6d6d·616e··reinstall·comman | ||
| 0003 | 0003c150:·6427·0a20·2073·6574·5f66·6163·743a·0a20··d'.··set_fact:.· | ||
| 0003 | 0003c160:·2020·2070·6163·6b61·6765·5f6d·616e·6167·····package_manag | ||
| 0003 | 0003c170:·6572·5f72·6569·6e73·7461·6c6c·5f63·6d64··er_reinstall_cmd | ||
| 0003 | 0003c180:·3a20·646e·6620·7265·696e·7374·616c·6c20··:·dnf·reinstall· | ||
| 0003 | 0003c190:·2d79·0a20·2077·6865·6e3a·2061·6e73·6962··-y.··when:·ansib | ||
| 0003 | 0003c1a0:·6c65·5f64·6973·7472·6962·7574·696f·6e20··le_distribution· | ||
| 0003 | 0003c1b0:·696e·205b·2022·4665·646f·7261·222c·2022··in·[·"Fedora",·" | ||
| 0003 | 0003c1c0:·5265·6448·6174·222c·2022·4365·6e74·4f53··RedHat",·"CentOS | ||
| 0003 | 0003c1d0:·222c·2022·4f72·6163·6c65·4c69·6e75·7822··",·"OracleLinux" | ||
| 0003 | 0003c1e0:·205d·0a20·2074·6167·733a·0a20·202d·2043···].··tags:.··-·C | ||
| 0003 | 0003c1f0:·4a49·532d·352e·3130·2e34·2e31·0a20·202d··JIS-5.10.4.1.··- | ||
| 0003 | 0003c200:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003 | 0003c210:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003 | 0003c220:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003 | 0003c230:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003 | 0003c240:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003 | 0003c250:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003 | 0003c260:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003 | 0003c270:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003 | 0003c280:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003 | 0003c290:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003 | 0003c2a0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003 | 0003c2b0:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003 | 0003c2c0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003 | 0003c2d0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003 | 0003c2e0:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003 | 0003c2f0:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003 | 0003c300:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003c | 0003c310:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003c | 0003c320:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003c | 0003c330:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| Max diff block lines reached; 9926892/9952614 bytes (99.74%) of diff not shown. | |||
| Offset 62, 15 lines modified | Offset 62, 15 lines modified | ||
| 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official | 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official |
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:9 | 65 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 66 | ····*·cpe:/o:centos:centos:9 | 66 | ····*·cpe:/o:centos:centos:9 |
| 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 74 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 74 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 75 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 75 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 76 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 76 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 128, 14 lines modified | Offset 128, 27 lines modified | ||
| 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 137 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 138 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 139 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 140 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 141 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 142 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 140 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 148 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 141 | ··set_fact: | 149 | ··set_fact: |
| Offset 262, 27 lines modified | Offset 275, 14 lines modified | ||
| 262 | ··-·PCI-DSSv4-11.5.2 | 275 | ··-·PCI-DSSv4-11.5.2 |
| 263 | ··-·high_complexity | 276 | ··-·high_complexity |
| 264 | ··-·high_severity | 277 | ··-·high_severity |
| 265 | ··-·medium_disruption | 278 | ··-·medium_disruption |
| 266 | ··-·no_reboot_needed | 279 | ··-·no_reboot_needed |
| 267 | ··-·restrict_strategy | 280 | ··-·restrict_strategy |
| 268 | ··-·rpm_verify_hashes | 281 | ··-·rpm_verify_hashes |
| 269 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 270 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 271 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 272 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 273 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 274 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 275 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 276 | fi | ||
| 277 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 282 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 278 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 283 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 279 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 284 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 280 | run·the·following·command·to·determine·which·package·owns·it: | 285 | run·the·following·command·to·determine·which·package·owns·it: |
| 281 | $·rpm·-qf·FILENAME | 286 | $·rpm·-qf·FILENAME |
| 282 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 287 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 283 | $·sudo·rpm·--setugids·PACKAGENAME | 288 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 301, 14 lines modified | Offset 301, 40 lines modified | ||
| 301 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 301 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 302 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 302 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 303 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 303 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 304 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 304 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 305 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 305 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 313 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 314 | declare·-A·SETPERMS_RPM_DICT | ||
| 315 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 316 | #·is·expected·by·the·RPM·database | ||
| 317 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 318 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 319 | do | ||
| 320 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 321 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 322 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 323 | done | ||
| 324 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 325 | #·correct·values | ||
| 326 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 327 | do | ||
| 328 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 329 | done | ||
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 313 | -·name:·Read·list·of·files·with·incorrect·ownership | 335 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 314 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 336 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 383, 40 lines modified | Offset 409, 14 lines modified | ||
| 383 | ··-·PCI-DSSv4-11.5.2 | 409 | ··-·PCI-DSSv4-11.5.2 |
| 384 | ··-·high_complexity | 410 | ··-·high_complexity |
| 385 | ··-·high_severity | 411 | ··-·high_severity |
| 386 | ··-·medium_disruption | 412 | ··-·medium_disruption |
| 387 | ··-·no_reboot_needed | 413 | ··-·no_reboot_needed |
| 388 | ··-·restrict_strategy | 414 | ··-·restrict_strategy |
| 389 | ··-·rpm_verify_ownership | 415 | ··-·rpm_verify_ownership |
| 390 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 391 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 392 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 393 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 394 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 395 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1017502/1025335 bytes (99.24%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000384f0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038500:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038500:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038510:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038510:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038520:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038520:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038530:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038530:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038540:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038540:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038550:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038560:·6173·206f·6620·3230·3234·2d31·312d·303 | 00038560:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00038570:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038570:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038580:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038580:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038590:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038590:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000385a0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000385a0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000385b0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000385b0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000385c0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000385c0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000385d0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000385d0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15144, 197 lines modified | Offset 15144, 197 lines modified | ||
| 0003b270:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b270:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b280:·3839·3331·2220·7461·6269·6e64·6578·3d22··8931"·tabindex=" | 0003b280:·3839·3331·2220·7461·6269·6e64·6578·3d22··8931"·tabindex=" | ||
| 0003b290:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b290:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b2a0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b2a0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b2b0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b2b0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b2c0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b2c0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b2d0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b2d0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b2e0:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b2f0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b300:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b310:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b320:·7073·6522·2069·643d·2269·646d·3839·3331··pse"·id="idm8931 | |||
| 0003b330:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | |||
| 0003b340:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b350:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b360:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b370:·6d73·0a69·6620·2820·5b20·2120·2d66·202f··ms.if·(·[·!·-f·/ | |||
| 0003b380:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003b390:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| 0003b3a0:·7275·6e2f·2e63·6f6e·7461·696e·6572·656e··run/.containeren | |||
| 0003b3b0:·7620·5d20·2661·6d70·3b26·616d·703b·2021··v·]·&&·! | |||
| 0003b2e0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b2f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b300:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b310:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b320:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b330:·3933·3122·3e3c·7461·626c·6520·636c·6173··931"><table·clas | |||
| 0003b340:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b350:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b360:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b370:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b380:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b390:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | |||
| 0003b3a0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b3b0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0003b3c0:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0003b3d0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b3e0:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0003b3f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b400:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003b410:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b420:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b430:·6f64·653e·2d20·6e61·6d65·3a20·4368·6563··ode>-·name:·Chec | |||
| 0003b440:·6b20·746f·2073·6565·2074·6865·2063·7572··k·to·see·the·cur | |||
| 0003b450:·7265·6e74·2073·7461·7475·7320·6f66·2046··rent·status·of·F | |||
| 0003b460:·4950·5320·6d6f·6465·0a20·2063·6f6d·6d61··IPS·mode.··comma | |||
| 0003b470:·6e64·3a20·2f75·7372·2f62·696e·2f66·6970··nd:·/usr/bin/fip | |||
| 0003b480:·732d·6d6f·6465·2d73·6574·7570·202d·2d63··s-mode-setup·--c | |||
| 0003b490:·6865·636b·0a20·2072·6567·6973·7465·723a··heck.··register: | |||
| 0003b4a0:·2069·735f·6669·7073·5f65·6e61·626c·6564···is_fips_enabled | |||
| 0003b4b0:·0a20·2063·6861·6e67·6564·5f77·6865·6e3a··.··changed_when: | |||
| 0003b4c0:·2066·616c·7365·0a20·2066·6169·6c65·645f···false.··failed_ | |||
| 0003b4d0:·7768·656e·3a20·6661·6c73·650a·2020·7768··when:·false.··wh | |||
| 0003b4e0:·656e·3a20·2820·616e·7369·626c·655f·7669··en:·(·ansible_vi | |||
| 0003b4f0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b500:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b510:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b520:·767a·222c·2022·706f·646d·616e·222c·0a20··vz",·"podman",.· | |||
| 0003b | 0003b3c0:·2028·205b·2022·247b·636f·6e74·6169·6e65···(·[·"${containe | ||
| 0003b540:·616e·6420·6e6f·7420·2820·6c6f·6f6b·7570··and·not·(·lookup | |||
| 0003b550:·2822·656e·7622·2c20·2263·6f6e·7461·696e··("env",·"contain | |||
| 0003b560:·6572·2229·203d·3d20·2262·7772·6170·2d6f··er")·==·"bwrap-o | |||
| 0003b570:·7362·7569·6c64·2220·2920·290a·2020·7461··sbuild"·)·).··ta | |||
| 0003b580:·6773·3a0a·2020·2d20·4449·5341·2d53·5449··gs:.··-·DISA-STI | |||
| 0003b590:·472d·5248·454c·2d30·392d·3637·3130·3130··G-RHEL-09-671010 | |||
| 0003b5a0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b5b0:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| 0003b5c0:·542d·3830·302d·3533·2d49·412d·370a·2020··T-800-53-IA-7.·· | |||
| 0003b5d0:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003b5e0:·2d31·320a·2020·2d20·4e49·5354·2d38·3030··-12.··-·NIST-800 | |||
| 0003b5f0:·2d35·332d·5343·2d31·3228·3229·0a20·202d··-53-SC-12(2).··- | |||
| 0003b600:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003b610:·3132·2833·290a·2020·2d20·4e49·5354·2d38··12(3).··-·NIST-8 | |||
| 0003b620:·3030·2d35·332d·5343·2d31·330a·2020·2d20··00-53-SC-13.··-· | |||
| 0003b630:·656e·6162·6c65·5f64·7261·6375·745f·6669··enable_dracut_fi | |||
| 0003b640:·7073·5f6d·6f64·756c·650a·2020·2d20·6869··ps_module.··-·hi | |||
| 0003b650:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | |||
| 0003b660:·6d65·6469·756d·5f63·6f6d·706c·6578·6974··medium_complexit | |||
| 0003b670:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | |||
| 0003b680:·7275·7074·696f·6e0a·2020·2d20·7265·626f··ruption.··-·rebo | |||
| 0003b690:·6f74·5f72·6571·7569·7265·640a·2020·2d20··ot_required.··-· | |||
| 0003b6a0:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | |||
| 0003b6b0:·790a·0a2d·206e·616d·653a·2045·6e61·626c··y..-·name:·Enabl | |||
| 0003b6c0:·6520·4649·5053·206d·6f64·650a·2020·636f··e·FIPS·mode.··co | |||
| 0003b6d0:·6d6d·616e·643a·202f·7573·722f·6269·6e2f··mmand:·/usr/bin/ | |||
| 0003b6e0:·6669·7073·2d6d·6f64·652d·7365·7475·7020··fips-mode-setup· | |||
| 0003b6f0:·2d2d·656e·6162·6c65·0a20·2077·6865·6e3a··--enable.··when: | |||
| 0003b700:·0a20·202d·2028·2061·6e73·6962·6c65·5f76··.··-·(·ansible_v | |||
| 0003b710:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b720:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b730:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b740:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b750:·2263·6f6e·7461·696e·6572·225d·0a20·2020··"container"].··· | |||
| 0003b760:·2061·6e64·206e·6f74·2028·206c·6f6f·6b75···and·not·(·looku | |||
| 0003b770:·7028·2265·6e76·222c·2022·636f·6e74·6169··p("env",·"contai | |||
| 0003b | 0003b3d0:·723a·2d7d·2220·3d3d·2022·6277·7261·702d··r:-}"·==·"bwrap- | ||
| 0003b | 0003b3e0:·6f73·6275·696c·6422·205d·2029·2029·3b20··osbuild"·]·)·);· | ||
| 0003b3f0:·7468·656e·0a0a·6669·7073·2d6d·6f64·652d··then..fips-mode- | |||
| 0003b400:·7365·7475·7020·2d2d·656e·6162·6c65·0a46··setup·--enable.F | |||
| 0003b410:·4950·535f·434f·4e46·3d22·2f65·7463·2f64··IPS_CONF="/etc/d | |||
| 0003b420:·7261·6375·742e·636f·6e66·2e64·2f34·302d··racut.conf.d/40- | |||
| 0003b430:·6669·7073·2e63·6f6e·6622·0a69·6620·2120··fips.conf".if·!· | |||
| 0003b440:·6772·6570·2022·5e61·6464·5f64·7261·6375··grep·"^add_dracu | |||
| 0003b7a0:·2069·735f·6669·7073·5f65·6e61·626c·6564···is_fips_enabled | |||
| 0003b7b0:·2e73·7464·6f75·742e·6669·6e64·2827·4649··.stdout.find('FI | |||
| 0003b7c0:·5053·206d·6f64·6520·6973·2065·6e61·626c··PS·mode·is·enabl | |||
| 0003b7d0:·6564·2e27·2920·3d3d·202d·310a·2020·7461··ed.')·==·-1.··ta | |||
| 0003b7e0:·6773·3a0a·2020·2d20·4449·5341·2d53·5449··gs:.··-·DISA-STI | |||
| 0003b7f0:·472d·5248·454c·2d30·392d·3637·3130·3130··G-RHEL-09-671010 | |||
| 0003b800:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b810:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| Max diff block lines reached; 6230238/6257202 bytes (99.57%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 108, 14 lines modified | Offset 108, 27 lines modified | ||
| 108 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 108 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 109 | ············_\x8i_\x8s_\x8m······1446 | 109 | ············_\x8i_\x8s_\x8m······1446 |
| 110 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 110 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 111 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 111 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 112 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 112 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 117 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 118 | fips-mode-setup·--enable | ||
| 119 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 120 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 121 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 122 | fi | ||
| 123 | else | ||
| 124 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 125 | fi | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 120 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 131 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 121 | ··command:·/usr/bin/fips-mode-setup·--check | 132 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 176, 27 lines modified | Offset 189, 14 lines modified | ||
| 176 | ··-·NIST-800-53-SC-13 | 189 | ··-·NIST-800-53-SC-13 |
| 177 | ··-·enable_dracut_fips_module | 190 | ··-·enable_dracut_fips_module |
| 178 | ··-·high_severity | 191 | ··-·high_severity |
| 179 | ··-·medium_complexity | 192 | ··-·medium_complexity |
| 180 | ··-·medium_disruption | 193 | ··-·medium_disruption |
| 181 | ··-·reboot_required | 194 | ··-·reboot_required |
| 182 | ··-·restrict_strategy | 195 | ··-·restrict_strategy |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 184 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 185 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 186 | fips-mode-setup·--enable | ||
| 187 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 188 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 189 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 190 | fi | ||
| 191 | else | ||
| 192 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 193 | fi | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | To·enable·FIPS·mode,·run·the·following·command: | 197 | To·enable·FIPS·mode,·run·the·following·command: |
| 196 | fips-mode-setup·--enable | 198 | fips-mode-setup·--enable |
| 197 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 199 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 198 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 200 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 199 | ····*·Creating·/etc/system-fips | 201 | ····*·Creating·/etc/system-fips |
| Offset 210, 14 lines modified | Offset 210, 45 lines modified | ||
| 210 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 210 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 211 | ············_\x8i_\x8s_\x8m······1446 | 211 | ············_\x8i_\x8s_\x8m······1446 |
| 212 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 212 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 213 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 213 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 214 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 214 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 215 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 215 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 216 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 216 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 218 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 219 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 220 | var_system_crypto_policy='FIPS:OSPP' | ||
| 221 | fips-mode-setup·--enable | ||
| 222 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 223 | rc=$? | ||
| 224 | if·test·"$rc"·=·127;·then | ||
| 225 | » echo·"$stderr_of_call"·>&2 | ||
| 226 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 227 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 228 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 229 | » false··#·end·with·an·error·code | ||
| 230 | elif·test·"$rc"·!=·0;·then | ||
| 231 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 232 | » false··#·end·with·an·error·code | ||
| 233 | fi | ||
| 234 | else | ||
| 235 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 236 | fi | ||
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 238 | [customizations] | ||
| 239 | fips·=·true | ||
| 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 240 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 218 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 241 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 219 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 242 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 220 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 243 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 221 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 244 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 222 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 245 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 223 | ··set_fact: | 246 | ··set_fact: |
| Offset 317, 45 lines modified | Offset 348, 14 lines modified | ||
| 317 | ··-·NIST-800-53-SC-13 | 348 | ··-·NIST-800-53-SC-13 |
| 318 | ··-·enable_fips_mode | 349 | ··-·enable_fips_mode |
| 319 | ··-·high_severity | 350 | ··-·high_severity |
| 320 | ··-·medium_complexity | 351 | ··-·medium_complexity |
| 321 | ··-·medium_disruption | 352 | ··-·medium_disruption |
| 322 | ··-·reboot_required | 353 | ··-·reboot_required |
| 323 | ··-·restrict_strategy | 354 | ··-·restrict_strategy |
| 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 880322/887353 bytes (99.21%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 000384f0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038500:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038500:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038510:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038510:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038520:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038520:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038530:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038530:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038540:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038540:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038550:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00038550:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00038560:·2d31·312d·303 | 00038560:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00038570:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038570:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038580:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038580:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038590:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038590:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000385a0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000385a0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000385b0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000385b0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000385c0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000385c0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000385d0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000385d0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15294, 301 lines modified | Offset 15294, 301 lines modified | ||
| 0003bbd0:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | 0003bbd0:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | ||
| 0003bbe0:·3838·2220·7461·6269·6e64·6578·3d22·3022··88"·tabindex="0" | 0003bbe0:·3838·2220·7461·6269·6e64·6578·3d22·3022··88"·tabindex="0" | ||
| 0003bbf0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003bbf0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003bc00:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003bc00:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003bc10:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003bc10:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003bc20:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003bc20:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003bc30:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003bc30:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003bc40:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003bc50:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003bc60:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bc70:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bc80:·6522·2069·643d·2269·646d·3830·3838·223e··e"·id="idm8088"> | |||
| 0003bc90:·3c70·7265·3e3c·636f·6465·3e0a·2320·4669··<pre><code>.#·Fi | |||
| 0003bca0:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | |||
| 0003bcb0:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | |||
| 0003bcc0:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | |||
| 0003bcd0:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | |||
| 0003bce0:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | |||
| 0003bcf0:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | |||
| 0003bd00:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | |||
| 0003bd10:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | |||
| 0003bd20:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | |||
| 0003bd30:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | |||
| 0003bd40:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | |||
| 0003bd50:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | |||
| 0003bd60:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | |||
| 0003bd70:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | |||
| 0003bd80:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003bd90:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | |||
| 0003bda0:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | |||
| 0003bdb0:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | |||
| 0003bdc0:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | |||
| 0003bdd0:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | |||
| 0003bde0:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | |||
| 0003bdf0:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | |||
| 0003be00:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | |||
| 0003be10:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | |||
| 0003be20:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | |||
| 0003be30:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | |||
| 0003be40:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | |||
| 0003be50:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | |||
| 0003be60:·2020·200a·2020·2020·646e·6620·7265·696e·····.····dnf·rein | |||
| 0003be70:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | |||
| 0003be80:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | |||
| 0003be90:·2020·2020·0a66·690a·3c2f·636f·6465·3e3c······.fi.</code>< | |||
| 0003bea0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003beb0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bec0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bed0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bee0:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003bef0:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | |||
| 0003bf00:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bf10:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bf20:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bf30:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bf40:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b | 0003bf50:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003b | 0003bf60:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b | 0003bf70:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003bf80:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003bf90:·6170·7365·2220·6964·3d22·6964·6d38·3038··apse"·id="idm808 | ||
| 0003b | 0003bfa0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | ||
| 0003b | 0003bfb0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b | 0003bfc0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b | 0003bfd0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b | 0003bfe0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b | 0003bff0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003 | 0003c000:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003 | 0003c010:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003 | 0003c020:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003 | 0003c030:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003 | 0003c040:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003 | 0003c050:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003 | 0003c060:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003 | 0003c070:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003 | 0003c080:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003 | 0003c090:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003 | 0003c0a0:·3e2d·206e·616d·653a·2027·5365·7420·6661··>-·name:·'Set·fa | ||
| 0003 | 0003c0b0:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003 | 0003c0c0:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003 | 0003c0d0:·6d6d·616e·6427·0a20·2073·6574·5f66·6163··mmand'.··set_fac | ||
| 0003 | 0003c0e0:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003 | 0003c0f0:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003 | 0003c100:·5f63·6d64·3a20·646e·6620·7265·696e·7374··_cmd:·dnf·reinst | ||
| 0003 | 0003c110:·616c·6c20·2d79·0a20·2077·6865·6e3a·2061··all·-y.··when:·a | ||
| 0003 | 0003c120:·6e73·6962·6c65·5f64·6973·7472·6962·7574··nsible_distribut | ||
| 0003 | 0003c130:·696f·6e20·696e·205b·2022·4665·646f·7261··ion·in·[·"Fedora | ||
| 0003 | 0003c140:·222c·2022·5265·6448·6174·222c·2022·4365··",·"RedHat",·"Ce | ||
| 0003 | 0003c150:·6e74·4f53·222c·2022·4f72·6163·6c65·4c69··ntOS",·"OracleLi | ||
| 0003 | 0003c160:·6e75·7822·205d·0a20·2074·6167·733a·0a20··nux"·].··tags:.· | ||
| 0003 | 0003c170:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003 | 0003c180:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003 | 0003c190:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003 | 0003c1a0:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003 | 0003c1b0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003 | 0003c1c0:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003 | 0003c1d0:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003 | 0003c1e0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003 | 0003c1f0:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003 | 0003c200:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003 | 0003c210:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003 | 0003c220:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003 | 0003c230:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003 | 0003c240:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003 | 0003c250:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003 | 0003c260:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003 | 0003c270:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003 | 0003c280:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003 | 0003c290:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003 | 0003c2a0:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003 | 0003c2b0:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| Max diff block lines reached; 17139239/17164961 bytes (99.85%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 127, 14 lines modified | Offset 127, 27 lines modified | ||
| 127 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 127 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 128 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 128 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 129 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 129 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 136 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 137 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 138 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 139 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 140 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 141 | fi | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 139 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 147 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 140 | ··set_fact: | 148 | ··set_fact: |
| Offset 261, 27 lines modified | Offset 274, 14 lines modified | ||
| 261 | ··-·PCI-DSSv4-11.5.2 | 274 | ··-·PCI-DSSv4-11.5.2 |
| 262 | ··-·high_complexity | 275 | ··-·high_complexity |
| 263 | ··-·high_severity | 276 | ··-·high_severity |
| 264 | ··-·medium_disruption | 277 | ··-·medium_disruption |
| 265 | ··-·no_reboot_needed | 278 | ··-·no_reboot_needed |
| 266 | ··-·restrict_strategy | 279 | ··-·restrict_strategy |
| 267 | ··-·rpm_verify_hashes | 280 | ··-·rpm_verify_hashes |
| 268 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 269 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 270 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 271 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 272 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 273 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 274 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 275 | fi | ||
| 276 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 281 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 277 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 282 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 278 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 283 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 279 | run·the·following·command·to·determine·which·package·owns·it: | 284 | run·the·following·command·to·determine·which·package·owns·it: |
| 280 | $·rpm·-qf·FILENAME | 285 | $·rpm·-qf·FILENAME |
| 281 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 286 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 282 | $·sudo·rpm·--setugids·PACKAGENAME | 287 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 300, 14 lines modified | Offset 300, 40 lines modified | ||
| 300 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 300 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 301 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 301 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 302 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 302 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 303 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 303 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 304 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 304 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 305 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 305 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 306 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 306 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 312 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 313 | declare·-A·SETPERMS_RPM_DICT | ||
| 314 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 315 | #·is·expected·by·the·RPM·database | ||
| 316 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 317 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 318 | do | ||
| 319 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 320 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 321 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 322 | done | ||
| 323 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 324 | #·correct·values | ||
| 325 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 326 | do | ||
| 327 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 328 | done | ||
| 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 312 | -·name:·Read·list·of·files·with·incorrect·ownership | 334 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 313 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 335 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 382, 40 lines modified | Offset 408, 14 lines modified | ||
| 382 | ··-·PCI-DSSv4-11.5.2 | 408 | ··-·PCI-DSSv4-11.5.2 |
| 383 | ··-·high_complexity | 409 | ··-·high_complexity |
| 384 | ··-·high_severity | 410 | ··-·high_severity |
| 385 | ··-·medium_disruption | 411 | ··-·medium_disruption |
| 386 | ··-·no_reboot_needed | 412 | ··-·no_reboot_needed |
| 387 | ··-·restrict_strategy | 413 | ··-·restrict_strategy |
| 388 | ··-·rpm_verify_ownership | 414 | ··-·rpm_verify_ownership |
| 389 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 390 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 391 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 392 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 393 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 394 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1638935/1646658 bytes (99.53%) of diff not shown. | |||
| Offset 14425, 15 lines modified | Offset 14425, 15 lines modified | ||
| 00038580:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038580:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038590:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038590:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 000385a0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 000385a0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 000385b0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 000385b0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 000385c0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 000385c0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 000385d0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 000385d0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 000385e0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 000385e0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 000385f0:·3230·3234·2d31·312d·303 | 000385f0:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00038600:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038600:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038610:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038610:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038620:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038620:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038630:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038630:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038640:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038640:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038650:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038650:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038660:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038660:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15227, 236 lines modified | Offset 15227, 236 lines modified | ||
| 0003b7a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b7a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b7b0:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | 0003b7b0:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | ||
| 0003b7c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b7c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b7d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b7d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b7e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b7e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b7f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b7f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b810:·5265·6d65·6469·6174·696f·6e20· | 0003b810:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | ||
| 0003b820:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b830:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b840:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b850:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b860:·646d·3834·3238·223e·3c74·6162·6c65·2063··dm8428"><table·c | |||
| 0003b870:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b820:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b830:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b840:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b850:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b860:·6964·6d38·3432·3822·3e3c·7461·626c·6520··idm8428"><table· | |||
| 0003b870:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b880:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b8 | 0003b880:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b890:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b8a0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b8b0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b8c0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b8d0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b8e0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b8a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b8b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b8c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b8d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b8e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b8f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b900:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b910:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b920:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b930:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b | 0003b8f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b900:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b950:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b960:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b970:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b980:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b990:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b9a0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b9b0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b9c0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b9d0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b9e0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b9f0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003ba00:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003ba10:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003ba20:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003ba30:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003ba40:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003ba50:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003ba60:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003ba70:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003ba80:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003ba90:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003baa0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003bab0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003bac0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003bad0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003bae0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003baf0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003bb00:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003bb10:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bb20:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bb30:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bb40:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bb50:·7267·6574·3d22·2369·646d·3834·3239·2220··rget="#idm8429"· | |||
| 0003bb60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bb70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bb80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bb90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bba0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bbb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bbc0:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003bbd0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bbe0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bbf0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bc00:·2069·643d·2269·646d·3834·3239·223e·3c74···id="idm8429"><t | |||
| 0003bc10:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003bc20:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bc30:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003bc40:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003bc50:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003bc60:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003bc70:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bc80:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003bc90:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bca0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003bcb0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003bcc0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bcd0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b | 0003b910:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b920:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b930:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b940:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b950:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b960:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003b970:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b980:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b990:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b9a0:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b9b0:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003bcf0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003bd00:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003bd10:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| Max diff block lines reached; 32196960/32229306 bytes (99.90%) of diff not shown. | |||
| Offset 14449, 15 lines modified | Offset 14449, 15 lines modified | ||
| 00038700:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038700:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038710:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038710:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038720:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038720:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038730:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038730:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038740:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038740:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038750:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038750:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038760:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00038760:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00038770:·2d31·312d·303 | 00038770:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00038780:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038780:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038790:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038790:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 000387a0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 000387a0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000387b0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000387b0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000387c0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000387c0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000387d0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000387d0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000387e0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000387e0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15246, 235 lines modified | Offset 15246, 235 lines modified | ||
| 0003b8d0:·2d74·6172·6765·743d·2223·6964·6d38·3432··-target="#idm842 | 0003b8d0:·2d74·6172·6765·743d·2223·6964·6d38·3432··-target="#idm842 | ||
| 0003b8e0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | 0003b8e0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 0003b8f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b8f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b900:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b900:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b910:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b910:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b920:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b920:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b930:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b930:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b940:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b950:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b960:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b970:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b980:·7365·2220·6964·3d22·6964·6d38·3432·3822··se"·id="idm8428" | |||
| 0003b990:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b9a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b940:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b950:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b960:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b970:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b980:·7073·6522·2069·643d·2269·646d·3834·3238··pse"·id="idm8428 | |||
| 0003b990:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b9a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b9b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b9 | 0003b9b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b9c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b9d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b9e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b9f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ba00:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ba10:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ba20:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003ba30:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b9d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b9e0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b9f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ba00:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ba10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ba20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ba30:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ba40:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003ba50:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ba60:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003ba70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003ba80:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003ba90:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003baa0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003bab0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003bac0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003bad0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003bae0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003baf0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003bb00:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003bb10:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003bb20:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003bb30:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003bb40:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003bb50:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003bb60:·454c·2d30·392d·3635·3130·3130·0a20·202d··EL-09-651010.··- | |||
| 0003bb70:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003bb80:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003bb90:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003bba0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003bbb0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003bbc0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003bbd0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003bbe0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003bbf0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003bc00:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003bc10:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003bc20:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003bc30:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003bc40:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bc50:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bc60:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bc70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bc80:·6964·6d38·3432·3922·2074·6162·696e·6465··idm8429"·tabinde | |||
| 0003bc90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bca0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bcb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bcc0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bcd0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bce0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003bcf0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003bd00:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bd10:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003bd20:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bd30:·6d38·3432·3922·3e3c·7461·626c·6520·636c··m8429"><table·cl | |||
| 0003bd40:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003bd50:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003bd60:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003bd70:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003bd80:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003bd90:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bda0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003bdb0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003bdc0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bdd0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bde0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003bdf0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003be00:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b | 0003ba40:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003ba50:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003ba60:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003ba70:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003ba80:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003ba90:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003baa0:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003bab0:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003bac0:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003bad0:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003bae0:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003be20:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| Max diff block lines reached; 32069673/32101881 bytes (99.90%) of diff not shown. | |||
| Offset 14354, 15 lines modified | Offset 14354, 15 lines modified | ||
| 00038110:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038110:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038120:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038120:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038130:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038130:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038140:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038140:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038150:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038150:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038160:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038160:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038170:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038170:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038180:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00038180:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00038190:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038190:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000381a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000381a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000381b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000381b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000381c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000381c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000381d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000381d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000381e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000381e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000381f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000381f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15399, 239 lines modified | Offset 15399, 239 lines modified | ||
| 0003c260:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003c260:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003c270:·743d·2223·6964·6d32·3533·3222·2074·6162··t="#idm2532"·tab | 0003c270:·743d·2223·6964·6d32·3533·3222·2074·6162··t="#idm2532"·tab | ||
| 0003c280:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003c280:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003c290:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003c290:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003c2a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003c2a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003c2b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003c2b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003c2c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003c2c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c2d0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003c2d0:·2122·3e52·656d·6564·6961·7469·6f6e·204b··!">Remediation·K | ||
| 0003c2e0:·7562·6572·6e65·7465·7320·736e·6970·7065··ubernetes·snippe | |||
| 0003c2f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c300:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c310:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c320:·2220·6964·3d22·6964·6d32·3533·3222·3e3c··"·id="idm2532">< | |||
| 0003c330:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c340:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c350:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c360:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c370:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c380:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c390:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c3a0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c3b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c3c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c3d0:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 0003c3e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c3f0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c400:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003c410:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c420:·653e·3c63·6f64·653e·2d2d·2d0a·6170·6956··e><code>---.apiV | |||
| 0003c430:·6572·7369·6f6e·3a20·6d61·6368·696e·6563··ersion:·machinec | |||
| 0003c440:·6f6e·6669·6775·7261·7469·6f6e·2e6f·7065··onfiguration.ope | |||
| 0003c450:·6e73·6869·6674·2e69·6f2f·7631·0a6b·696e··nshift.io/v1.kin | |||
| 0003c460:·643a·204d·6163·6869·6e65·436f·6e66·6967··d:·MachineConfig | |||
| 0003c470:·0a73·7065·633a·0a20·2063·6f6e·6669·673a··.spec:.··config: | |||
| 0003c480:·0a20·2020·2069·676e·6974·696f·6e3a·0a20··.····ignition:.· | |||
| 0003c490:·2020·2020·2076·6572·7369·6f6e·3a20·332e·······version:·3. | |||
| 0003c4a0:·312e·300a·2020·2020·7379·7374·656d·643a··1.0.····systemd: | |||
| 0003c4b0:·0a20·2020·2020·2075·6e69·7473·3a0a·2020··.······units:.·· | |||
| 0003c4c0:·2020·2020·2020·2d20·6e61·6d65·3a20·636f········-·name:·co | |||
| 0003c4d0:·6e66·6967·7572·652d·6372·7970·746f·2d70··nfigure-crypto-p | |||
| 0003c4e0:·6f6c·6963·792e·7365·7276·6963·650a·2020··olicy.service.·· | |||
| 0003c4f0:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | |||
| 0003c500:·2074·7275·650a·2020·2020·2020·2020·2020···true.·········· | |||
| 0003c510:·636f·6e74·656e·7473·3a20·7c0a·2020·2020··contents:·|.···· | |||
| 0003c520:·2020·2020·2020·2020·5b55·6e69·745d·0a20··········[Unit].· | |||
| 0003c530:·2020·2020·2020·2020·2020·2042·6566·6f72·············Befor | |||
| 0003c540:·653d·6b75·6265·6c65·742e·7365·7276·6963··e=kubelet.servic | |||
| 0003c550:·650a·2020·2020·2020·2020·2020·2020·5b53··e.············[S | |||
| 0003c560:·6572·7669·6365·5d0a·2020·2020·2020·2020··ervice].········ | |||
| 0003c570:·2020·2020·5479·7065·3d6f·6e65·7368·6f74······Type=oneshot | |||
| 0003c580:·0a20·2020·2020·2020·2020·2020·2045·7865··.············Exe | |||
| 0003c590:·6353·7461·7274·3d75·7064·6174·652d·6372··cStart=update-cr | |||
| 0003c5a0:·7970·746f·2d70·6f6c·6963·6965·7320·2d2d··ypto-policies·-- | |||
| 0003c5b0:·7365·7420·7b7b·2e76·6172·5f73·7973·7465··set·{{.var_syste | |||
| 0003c5c0:·6d5f·6372·7970·746f·5f70·6f6c·6963·797d··m_crypto_policy} | |||
| 0003c5d0:·7d0a·2020·2020·2020·2020·2020·2020·5265··}.············Re | |||
| 0003c5e0:·6d61·696e·4166·7465·7245·7869·743d·7965··mainAfterExit=ye | |||
| 0003c5f0:·730a·2020·2020·2020·2020·2020·2020·5b49··s.············[I | |||
| 0003c600:·6e73·7461·6c6c·5d0a·2020·2020·2020·2020··nstall].········ | |||
| 0003c610:·2020·2020·5761·6e74·6564·4279·3d6d·756c······WantedBy=mul | |||
| 0003c620:·7469·2d75·7365·722e·7461·7267·6574·0a3c··ti-user.target.< | |||
| 0003c630:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c640:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c650:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c660:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c670:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c680:·2223·6964·6d32·3533·3322·2074·6162·696e··"#idm2533"·tabin | |||
| 0003c690:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c6a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c6b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c6c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c6d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c6e0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003c6f0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003c700:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c710:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c720:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c730:·6d32·3533·3322·3e3c·7072·653e·3c63·6f64··m2533"><pre><cod | |||
| 0003c740:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | |||
| 0003c750:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | |||
| 0003c760:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | |||
| 0003c770:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | |||
| 0003c780:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | |||
| 0003c790:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | |||
| 0003c7a0:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | |||
| 0003c7b0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003c7c0:·223e·4445·4641·554c·543c·2f61·6262·723e··">DEFAULT</abbr> | |||
| 0003c7d0:·270a·0a0a·7374·6465·7272·5f6f·665f·6361··'...stderr_of_ca | |||
| 0003c7e0:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | |||
| 0003c7f0:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003c800:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | |||
| 0003c810:·7279·7074·6f5f·706f·6c69·6379·7d20·3226··rypto_policy}·2& | |||
| 0003c820:·6774·3b26·616d·703b·3120·2667·743b·202f··gt;&1·>·/ | |||
| 0003c830:·6465·762f·6e75·6c6c·290a·7263·3d24·3f0a··dev/null).rc=$?. | |||
| 0003c840:·0a69·6620·7465·7374·2022·2472·6322·203d··.if·test·"$rc"·= | |||
| 0003c850:·2031·3237·3b20·7468·656e·0a09·6563·686f···127;·then..echo | |||
| 0003c860:·2022·2473·7464·6572·725f·6f66·5f63·616c···"$stderr_of_cal | |||
| 0003c870:·6c22·2026·6774·3b26·616d·703b·320a·0965··l"·>&2..e | |||
| 0003c880:·6368·6f20·224d·616b·6520·7375·7265·2074··cho·"Make·sure·t | |||
| 0003c890:·6861·7420·7468·6520·7363·7269·7074·2069··hat·the·script·i | |||
| 0003c8a0:·7320·696e·7374·616c·6c65·6420·6f6e·2074··s·installed·on·t | |||
| 0003c8b0:·6865·2072·656d·6564·6961·7465·6420·7379··he·remediated·sy | |||
| 0003c8c0:·7374·656d·2e22·2026·6774·3b26·616d·703b··stem."·>& | |||
| 0003c8d0:·320a·0965·6368·6f20·2253·6565·206f·7574··2..echo·"See·out | |||
| 0003c8e0:·7075·7420·6f66·2074·6865·2027·646e·6620··put·of·the·'dnf· | |||
| 0003c8f0:·7072·6f76·6964·6573·2075·7064·6174·652d··provides·update- | |||
| 0003c900:·6372·7970·746f·2d70·6f6c·6963·6965·7327··crypto-policies' | |||
| 0003c910:·2063·6f6d·6d61·6e64·2220·2667·743b·2661···command"·>&a | |||
| 0003c920:·6d70·3b32·0a09·6563·686f·2022·746f·2073··mp;2..echo·"to·s | |||
| 0003c930:·6565·2077·6861·7420·7061·636b·6167·6520··ee·what·package· | |||
| 0003c940:·746f·2028·7265·2969·6e73·7461·6c6c·2220··to·(re)install"· | |||
| Max diff block lines reached; 17835003/17867763 bytes (99.82%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | ····*·cpe:/o:fedoraproject:fedora:41 | 43 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:42 | 44 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:43 | 45 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:44 | 46 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 47 | ····*·cpe:/o:fedoraproject:fedora:45 | 47 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 133, 14 lines modified | Offset 133, 58 lines modified | ||
| 133 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 133 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| 134 | ············_\x8i_\x8s_\x8m······1446 | 134 | ············_\x8i_\x8s_\x8m······1446 |
| 135 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 135 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 136 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 136 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 137 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 137 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 145 | --- | ||
| 146 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 147 | kind:·MachineConfig | ||
| 148 | spec: | ||
| 149 | ··config: | ||
| 150 | ····ignition: | ||
| 151 | ······version:·3.1.0 | ||
| 152 | ····systemd: | ||
| 153 | ······units: | ||
| 154 | ········-·name:·configure-crypto-policy.service | ||
| 155 | ··········enabled:·true | ||
| 156 | ··········contents:·| | ||
| 157 | ············[Unit] | ||
| 158 | ············Before=kubelet.service | ||
| 159 | ············[Service] | ||
| 160 | ············Type=oneshot | ||
| 161 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 162 | ············RemainAfterExit=yes | ||
| 163 | ············[Install] | ||
| 164 | ············WantedBy=multi-user.target | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 166 | var_system_crypto_policy='DEFAULT' | ||
| 167 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 168 | rc=$? | ||
| 169 | if·test·"$rc"·=·127;·then | ||
| 170 | » echo·"$stderr_of_call"·>&2 | ||
| 171 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 172 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 173 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 174 | » false··#·end·with·an·error·code | ||
| 175 | elif·test·"$rc"·!=·0;·then | ||
| 176 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 177 | » false··#·end·with·an·error·code | ||
| 178 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 145 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 184 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 146 | ··set_fact: | 185 | ··set_fact: |
| Offset 183, 66 lines modified | Offset 227, 49 lines modified | ||
| 183 | ··-·PCI-DSSv4-2.2.7 | 227 | ··-·PCI-DSSv4-2.2.7 |
| 184 | ··-·configure_crypto_policy | 228 | ··-·configure_crypto_policy |
| 185 | ··-·high_severity | 229 | ··-·high_severity |
| 186 | ··-·low_complexity | 230 | ··-·low_complexity |
| 187 | ··-·low_disruption | 231 | ··-·low_disruption |
| 188 | ··-·no_reboot_needed | 232 | ··-·no_reboot_needed |
| 189 | ··-·restrict_strategy | 233 | ··-·restrict_strategy |
| 234 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·G\x8Gn\x8nu\x8uT\x8TL\x8LS\x8S·l\x8li\x8ib\x8br\x8ra\x8ar\x8ry\x8y·t\x8to\x8o·u\x8us\x8se\x8e·D\x8Do\x8oD\x8D-\x8-a\x8ap\x8pp\x8pr\x8ro\x8ov\x8ve\x8ed\x8d·T\x8TL\x8LS\x8S·E\x8En\x8nc\x8cr\x8ry\x8yp\x8pt\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 235 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·GnuTLS·is·supported·by·system·crypto·policy,·but·the·GnuTLS·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·/etc/crypto-policies/back-ends/gnutls.config·contains·the·following·line·and·is·not·commented·out:·+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS1.0 | ||
| 236 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·GnuTLS·library·violate·expectations,·and·makes·system·configuration·more·fragmented. | ||
| 237 | Severity: ··medium | ||
| 238 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_gnutls_tls_crypto_policy | ||
| 239 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001453 | ||
| 240 | References:·_\x8n_\x8i_\x8s_\x8t···AC-17(2) | ||
| 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000250-GPOS-00093,·SRG-OS-000423-GPOS-00187 | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_.h_.e_.l_.l_.·_.s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 243 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 244 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 245 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 246 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 195 | --- | ||
| 196 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 197 | kind:·MachineConfig | ||
| 198 | spec: | ||
| 199 | ··config: | ||
| 200 | ····ignition: | ||
| 201 | ······version:·3.1.0 | ||
| 202 | ····systemd: | ||
| 203 | ······units: | ||
| 204 | ········-·name:·configure-crypto-policy.service | ||
| 205 | ··········enabled:·true | ||
| 206 | ··········contents:·| | ||
| 207 | ············[Unit] | ||
| 208 | ············Before=kubelet.service | ||
| 209 | ············[Service] | ||
| 210 | ············Type=oneshot | ||
| 211 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 212 | ············RemainAfterExit=yes | ||
| 213 | ············[Install] | ||
| 214 | ············WantedBy=multi-user.target | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | var_system_crypto_policy='DEFAULT' | ||
| 247 | CONF_FILE=/etc/crypto-policies/back-ends/gnutls.config | ||
| 248 | correct_value='+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS1.0' | ||
| 249 | grep·-q·${correct_value}·${CONF_FILE} | ||
| 217 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 218 | rc=$? | ||
| 250 | if·[[·$?·-ne·0·]];·then | ||
| Max diff block lines reached; 1733893/1740337 bytes (99.63%) of diff not shown. | |||
| Offset 14377, 15 lines modified | Offset 14377, 15 lines modified | ||
| 00038280:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038280:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038290:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038290:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 000382a0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 000382a0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 000382b0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 000382b0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 000382c0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 000382c0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 000382d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000382d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000382e0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 000382e0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 000382f0:·2d31·312d·303 | 000382f0:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00038300:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038300:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038310:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038310:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038320:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038320:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038330:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038330:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038340:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038340:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038350:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038350:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038360:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038360:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15236, 300 lines modified | Offset 15236, 300 lines modified | ||
| 0003b830:·6574·3d22·2369·646d·3138·3632·2220·7461··et="#idm1862"·ta | 0003b830:·6574·3d22·2369·646d·3138·3632·2220·7461··et="#idm1862"·ta | ||
| 0003b840:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b840:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b850:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b850:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b860:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b860:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b870:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b870:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b880:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b880:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b890:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b890:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b8a0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b8b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b8c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b8d0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b8e0:·2269·646d·3138·3632·223e·3c70·7265·3e3c··"idm1862"><pre>< | |||
| 0003b8f0:·636f·6465·3e0a·2320·4669·6e64·2077·6869··code>.#·Find·whi | |||
| 0003b900:·6368·2066·696c·6573·2068·6176·6520·696e··ch·files·have·in | |||
| 0003b910:·636f·7272·6563·7420·6861·7368·2028·6e6f··correct·hash·(no | |||
| 0003b920:·7420·696e·202f·6574·632c·2062·6563·6175··t·in·/etc,·becau | |||
| 0003b930:·7365·206f·6620·7468·6520·7379·7374·656d··se·of·the·system | |||
| 0003b940:·2072·656c·6174·6564·2063·6f6e·6669·6720···related·config· | |||
| 0003b950:·6669·6c65·7329·2061·6e64·2074·6865·6e20··files)·and·then· | |||
| 0003b960:·6765·7420·6669·6c65·7320·6e61·6d65·730a··get·files·names. | |||
| 0003b970:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b980:·7265·6374·5f68·6173·683d·2224·2872·706d··rect_hash="$(rpm | |||
| 0003b990:·202d·5661·202d·2d6e·6f63·6f6e·6669·6720···-Va·--noconfig· | |||
| 0003b9a0:·7c20·6772·6570·202d·4520·275e·2e2e·3527··|·grep·-E·'^..5' | |||
| 0003b9b0:·207c·2061·776b·2027·7b70·7269·6e74·2024···|·awk·'{print·$ | |||
| 0003b9c0:·4e46·7d27·2029·220a·0a69·6620·5b20·2d6e··NF}'·)"..if·[·-n | |||
| 0003b9d0:·2022·2466·696c·6573·5f77·6974·685f·696e···"$files_with_in | |||
| 0003b9e0:·636f·7272·6563·745f·6861·7368·2220·5d3b··correct_hash"·]; | |||
| 0003b9f0:·2074·6865·6e0a·2020·2020·2320·4672·6f6d···then.····#·From | |||
| 0003ba00:·2066·696c·6573·206e·616d·6573·2067·6574···files·names·get | |||
| 0003ba10:·2070·6163·6b61·6765·206e·616d·6573·2061···package·names·a | |||
| 0003ba20:·6e64·2063·6861·6e67·6520·6e65·776c·696e··nd·change·newlin | |||
| 0003ba30:·6520·746f·2073·7061·6365·2c20·6265·6361··e·to·space,·beca | |||
| 0003ba40:·7573·6520·7270·6d20·7772·6974·6573·2065··use·rpm·writes·e | |||
| 0003ba50:·6163·6820·7061·636b·6167·6520·746f·206e··ach·package·to·n | |||
| 0003ba60:·6577·206c·696e·650a·2020·2020·7061·636b··ew·line.····pack | |||
| 0003ba70:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | |||
| 0003ba80:·6c3d·2224·2872·706d·202d·7166·2024·6669··l="$(rpm·-qf·$fi | |||
| 0003ba90:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003baa0:·6374·5f68·6173·6820·7c20·7472·2027·5c6e··ct_hash·|·tr·'\n | |||
| 0003bab0:·2720·2720·2729·220a·0a20·2020·200a·2020··'·'·')"..····.·· | |||
| 0003bac0:·2020·646e·6620·7265·696e·7374·616c·6c20····dnf·reinstall· | |||
| 0003bad0:·2d79·2024·7061·636b·6167·6573·5f74·6f5f··-y·$packages_to_ | |||
| 0003bae0:·7265·696e·7374·616c·6c0a·2020·2020·0a66··reinstall.····.f | |||
| 0003baf0:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003bb00:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bb10:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bb20:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bb30:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bb40:·6574·3d22·2369·646d·3138·3633·2220·7461··et="#idm1863"·ta | |||
| 0003bb50:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bb60:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bb70:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bb80:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bb90:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bba0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b | 0003bbb0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003b | 0003bbc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003bbd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003bbe0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003bbf0:·6964·3d22·6964·6d31·3836·3322·3e3c·7461··id="idm1863"><ta | ||
| 0003b | 0003bc00:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b | 0003bc10:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b | 0003bc20:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b | 0003bc30:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b | 0003bc40:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b | 0003bc50:·793a·3c2f·7468·3e3c·7464·3e68·6967·683c··y:</th><td>high< | ||
| 0003b | 0003bc60:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003bc70:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b | 0003bc80:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003b | 0003bc90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003bca0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003bcb0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003bcc0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003bcd0:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003b | 0003bce0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b | 0003bcf0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003b | 0003bd00:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| 0003b | 0003bd10:·636b·6167·6520·6d61·6e61·6765·7220·7265··ckage·manager·re | ||
| 0003b | 0003bd20:·696e·7374·616c·6c20·636f·6d6d·616e·6427··install·command' | ||
| 0003b | 0003bd30:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 0003b | 0003bd40:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | ||
| 0003b | 0003bd50:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | ||
| 0003b | 0003bd60:·646e·6620·7265·696e·7374·616c·6c20·2d79··dnf·reinstall·-y | ||
| 0003b | 0003bd70:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | ||
| 0003b | 0003bd80:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003b | 0003bd90:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003b | 0003bda0:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003b | 0003bdb0:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003b | 0003bdc0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003b | 0003bdd0:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003b | 0003bde0:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003b | 0003bdf0:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003b | 0003be00:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003b | 0003be10:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003b | 0003be20:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b | 0003be30:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003b | 0003be40:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003b | 0003be50:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b | 0003be60:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003b | 0003be70:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003b | 0003be80:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003be90:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003b | 0003bea0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003b | 0003beb0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003b | 0003bec0:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003b | 0003bed0:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003b | 0003bee0:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003b | 0003bef0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003b | 0003bf00:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003b | 0003bf10:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| Max diff block lines reached; 26332050/26373228 bytes (99.84%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | ····*·cpe:/o:fedoraproject:fedora:41 | 49 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 50 | ····*·cpe:/o:fedoraproject:fedora:42 | 50 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 51 | ····*·cpe:/o:fedoraproject:fedora:43 | 51 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 52 | ····*·cpe:/o:fedoraproject:fedora:44 | 52 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 53 | ····*·cpe:/o:fedoraproject:fedora:45 | 53 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 113, 14 lines modified | Offset 113, 27 lines modified | ||
| 113 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 113 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 114 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 114 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 125 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 133 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 126 | ··set_fact: | 134 | ··set_fact: |
| Offset 247, 27 lines modified | Offset 260, 14 lines modified | ||
| 247 | ··-·PCI-DSSv4-11.5.2 | 260 | ··-·PCI-DSSv4-11.5.2 |
| 248 | ··-·high_complexity | 261 | ··-·high_complexity |
| 249 | ··-·high_severity | 262 | ··-·high_severity |
| 250 | ··-·medium_disruption | 263 | ··-·medium_disruption |
| 251 | ··-·no_reboot_needed | 264 | ··-·no_reboot_needed |
| 252 | ··-·restrict_strategy | 265 | ··-·restrict_strategy |
| 253 | ··-·rpm_verify_hashes | 266 | ··-·rpm_verify_hashes |
| 254 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 255 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 256 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 257 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 258 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 259 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 260 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 261 | fi | ||
| 262 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 267 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 263 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 268 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 264 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Fedora. | 269 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Fedora. |
| 265 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 270 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 266 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 271 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 286, 14 lines modified | Offset 286, 45 lines modified | ||
| 286 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 286 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 287 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 287 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 288 | ············_\x8i_\x8s_\x8m······1446 | 288 | ············_\x8i_\x8s_\x8m······1446 |
| 289 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 289 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 290 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 290 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 293 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 294 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 295 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 296 | var_system_crypto_policy='FIPS' | ||
| 297 | fips-mode-setup·--enable | ||
| 298 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 299 | rc=$? | ||
| 300 | if·test·"$rc"·=·127;·then | ||
| 301 | » echo·"$stderr_of_call"·>&2 | ||
| 302 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 303 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 304 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 305 | » false··#·end·with·an·error·code | ||
| 306 | elif·test·"$rc"·!=·0;·then | ||
| 307 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 308 | » false··#·end·with·an·error·code | ||
| 309 | fi | ||
| 310 | else | ||
| 311 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 312 | fi | ||
| 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 314 | [customizations] | ||
| 315 | fips·=·true | ||
| 293 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 316 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 294 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 317 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 295 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 318 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 296 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 319 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 297 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 320 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 298 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 321 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 299 | ··set_fact: | 322 | ··set_fact: |
| Offset 389, 45 lines modified | Offset 420, 14 lines modified | ||
| 389 | ··-·NIST-800-53-SC-13 | 420 | ··-·NIST-800-53-SC-13 |
| 390 | ··-·enable_fips_mode | 421 | ··-·enable_fips_mode |
| 391 | ··-·high_severity | 422 | ··-·high_severity |
| 392 | ··-·medium_complexity | 423 | ··-·medium_complexity |
| 393 | ··-·medium_disruption | 424 | ··-·medium_disruption |
| 394 | ··-·reboot_required | 425 | ··-·reboot_required |
| 395 | ··-·restrict_strategy | 426 | ··-·restrict_strategy |
| 396 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1567110/1574968 bytes (99.50%) of diff not shown. | |||
| Offset 14349, 15 lines modified | Offset 14349, 15 lines modified | ||
| 000380c0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000380c0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000380d0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000380d0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000380e0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000380e0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000380f0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000380f0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038100:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038100:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038110:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038110:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038120:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038120:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038130:·6173·206f·6620·3230·3234·2d31·312d·303 | 00038130:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00038140:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038140:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038150:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038150:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038160:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038160:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038170:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038170:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038180:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038180:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038190:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038190:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000381a0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000381a0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15177, 300 lines modified | Offset 15177, 300 lines modified | ||
| 0003b480:·6574·3d22·2369·646d·3138·3632·2220·7461··et="#idm1862"·ta | 0003b480:·6574·3d22·2369·646d·3138·3632·2220·7461··et="#idm1862"·ta | ||
| 0003b490:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b490:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b4a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b4a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b4b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b4b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b4c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b4c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b4d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b4d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b4e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b4e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b4f0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b500:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b510:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b520:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b530:·2269·646d·3138·3632·223e·3c70·7265·3e3c··"idm1862"><pre>< | |||
| 0003b540:·636f·6465·3e0a·2320·4669·6e64·2077·6869··code>.#·Find·whi | |||
| 0003b550:·6368·2066·696c·6573·2068·6176·6520·696e··ch·files·have·in | |||
| 0003b560:·636f·7272·6563·7420·6861·7368·2028·6e6f··correct·hash·(no | |||
| 0003b570:·7420·696e·202f·6574·632c·2062·6563·6175··t·in·/etc,·becau | |||
| 0003b580:·7365·206f·6620·7468·6520·7379·7374·656d··se·of·the·system | |||
| 0003b590:·2072·656c·6174·6564·2063·6f6e·6669·6720···related·config· | |||
| 0003b5a0:·6669·6c65·7329·2061·6e64·2074·6865·6e20··files)·and·then· | |||
| 0003b5b0:·6765·7420·6669·6c65·7320·6e61·6d65·730a··get·files·names. | |||
| 0003b5c0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b5d0:·7265·6374·5f68·6173·683d·2224·2872·706d··rect_hash="$(rpm | |||
| 0003b5e0:·202d·5661·202d·2d6e·6f63·6f6e·6669·6720···-Va·--noconfig· | |||
| 0003b5f0:·7c20·6772·6570·202d·4520·275e·2e2e·3527··|·grep·-E·'^..5' | |||
| 0003b600:·207c·2061·776b·2027·7b70·7269·6e74·2024···|·awk·'{print·$ | |||
| 0003b610:·4e46·7d27·2029·220a·0a69·6620·5b20·2d6e··NF}'·)"..if·[·-n | |||
| 0003b620:·2022·2466·696c·6573·5f77·6974·685f·696e···"$files_with_in | |||
| 0003b630:·636f·7272·6563·745f·6861·7368·2220·5d3b··correct_hash"·]; | |||
| 0003b640:·2074·6865·6e0a·2020·2020·2320·4672·6f6d···then.····#·From | |||
| 0003b650:·2066·696c·6573·206e·616d·6573·2067·6574···files·names·get | |||
| 0003b660:·2070·6163·6b61·6765·206e·616d·6573·2061···package·names·a | |||
| 0003b670:·6e64·2063·6861·6e67·6520·6e65·776c·696e··nd·change·newlin | |||
| 0003b680:·6520·746f·2073·7061·6365·2c20·6265·6361··e·to·space,·beca | |||
| 0003b690:·7573·6520·7270·6d20·7772·6974·6573·2065··use·rpm·writes·e | |||
| 0003b6a0:·6163·6820·7061·636b·6167·6520·746f·206e··ach·package·to·n | |||
| 0003b6b0:·6577·206c·696e·650a·2020·2020·7061·636b··ew·line.····pack | |||
| 0003b6c0:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | |||
| 0003b6d0:·6c3d·2224·2872·706d·202d·7166·2024·6669··l="$(rpm·-qf·$fi | |||
| 0003b6e0:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003b6f0:·6374·5f68·6173·6820·7c20·7472·2027·5c6e··ct_hash·|·tr·'\n | |||
| 0003b700:·2720·2720·2729·220a·0a20·2020·200a·2020··'·'·')"..····.·· | |||
| 0003b710:·2020·646e·6620·7265·696e·7374·616c·6c20····dnf·reinstall· | |||
| 0003b720:·2d79·2024·7061·636b·6167·6573·5f74·6f5f··-y·$packages_to_ | |||
| 0003b730:·7265·696e·7374·616c·6c0a·2020·2020·0a66··reinstall.····.f | |||
| 0003b740:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b750:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b760:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b770:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b780:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b790:·6574·3d22·2369·646d·3138·3633·2220·7461··et="#idm1863"·ta | |||
| 0003b7a0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b7b0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b7c0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b7d0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b7e0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b7f0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b | 0003b800:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003b | 0003b810:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b820:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b830:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b840:·6964·3d22·6964·6d31·3836·3322·3e3c·7461··id="idm1863"><ta | ||
| 0003b | 0003b850:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b | 0003b860:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b | 0003b870:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b | 0003b880:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b | 0003b890:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b | 0003b8a0:·793a·3c2f·7468·3e3c·7464·3e68·6967·683c··y:</th><td>high< | ||
| 0003b | 0003b8b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b8c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b | 0003b8d0:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003b | 0003b8e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b8f0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b | 0003b900:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003b910:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b | 0003b920:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003b | 0003b930:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b | 0003b940:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003b | 0003b950:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| 0003b | 0003b960:·636b·6167·6520·6d61·6e61·6765·7220·7265··ckage·manager·re | ||
| 0003b | 0003b970:·696e·7374·616c·6c20·636f·6d6d·616e·6427··install·command' | ||
| 0003b | 0003b980:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | ||
| 0003b | 0003b990:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | ||
| 0003b | 0003b9a0:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | ||
| 0003b | 0003b9b0:·646e·6620·7265·696e·7374·616c·6c20·2d79··dnf·reinstall·-y | ||
| 0003b | 0003b9c0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | ||
| 0003b | 0003b9d0:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | ||
| 0003b | 0003b9e0:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | ||
| 0003b | 0003b9f0:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | ||
| 0003b | 0003ba00:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | ||
| 0003b | 0003ba10:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003b | 0003ba20:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003b | 0003ba30:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003b | 0003ba40:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003b | 0003ba50:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003b | 0003ba60:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003b | 0003ba70:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b | 0003ba80:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003b | 0003ba90:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003b | 0003baa0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b | 0003bab0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003b | 0003bac0:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003b | 0003bad0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003bae0:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003b | 0003baf0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003b | 0003bb00:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003b | 0003bb10:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003b | 0003bb20:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003b | 0003bb30:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003b | 0003bb40:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003b | 0003bb50:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003b | 0003bb60:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| Max diff block lines reached; 13597199/13638377 bytes (99.70%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | ····*·cpe:/o:fedoraproject:fedora:41 | 42 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 43 | ····*·cpe:/o:fedoraproject:fedora:42 | 43 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:43 | 44 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:44 | 45 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:45 | 46 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 100, 14 lines modified | Offset 100, 27 lines modified | ||
| 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 102 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 102 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 103 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 103 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 108 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 109 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 110 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 111 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 112 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 113 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 114 | fi | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 112 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 120 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 113 | ··set_fact: | 121 | ··set_fact: |
| Offset 234, 27 lines modified | Offset 247, 14 lines modified | ||
| 234 | ··-·PCI-DSSv4-11.5.2 | 247 | ··-·PCI-DSSv4-11.5.2 |
| 235 | ··-·high_complexity | 248 | ··-·high_complexity |
| 236 | ··-·high_severity | 249 | ··-·high_severity |
| 237 | ··-·medium_disruption | 250 | ··-·medium_disruption |
| 238 | ··-·no_reboot_needed | 251 | ··-·no_reboot_needed |
| 239 | ··-·restrict_strategy | 252 | ··-·restrict_strategy |
| 240 | ··-·rpm_verify_hashes | 253 | ··-·rpm_verify_hashes |
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 242 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 243 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 244 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 245 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 246 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 247 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 248 | fi | ||
| 249 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 254 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 250 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 255 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 251 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 256 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 252 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 257 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 253 | $·rpm·-qf·FILENAME | 258 | $·rpm·-qf·FILENAME |
| 254 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 259 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 275, 14 lines modified | Offset 275, 44 lines modified | ||
| 275 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 275 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 276 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 276 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 277 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 277 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 278 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 278 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 279 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 279 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 280 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 280 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 281 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 281 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 283 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 284 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 285 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 286 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 287 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 288 | declare·-A·SETPERMS_RPM_DICT | ||
| 289 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 290 | #·is·expected·by·the·RPM·database | ||
| 291 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 292 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 293 | do | ||
| 294 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 295 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 296 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 297 | ········do | ||
| 298 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 299 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 300 | ········done | ||
| 301 | done | ||
| 302 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 303 | #·correct·values | ||
| 304 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 305 | do | ||
| 306 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 307 | done | ||
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 283 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 284 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 285 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 286 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 287 | -·name:·Read·list·of·files·with·incorrect·permissions | 313 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 288 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 314 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 360, 44 lines modified | Offset 390, 14 lines modified | ||
| 360 | ··-·PCI-DSSv4-11.5.2 | 390 | ··-·PCI-DSSv4-11.5.2 |
| 361 | ··-·high_complexity | 391 | ··-·high_complexity |
| 362 | ··-·high_severity | 392 | ··-·high_severity |
| 363 | ··-·medium_disruption | 393 | ··-·medium_disruption |
| 364 | ··-·no_reboot_needed | 394 | ··-·no_reboot_needed |
| 365 | ··-·restrict_strategy | 395 | ··-·restrict_strategy |
| 366 | ··-·rpm_verify_permissions | 396 | ··-·rpm_verify_permissions |
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1064142/1072249 bytes (99.24%) of diff not shown. | |||
| Offset 14355, 15 lines modified | Offset 14355, 15 lines modified | ||
| 00038120:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038120:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038130:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038130:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038140:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038140:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038150:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038150:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038160:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038160:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038170:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038170:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038180:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00038180:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00038190:·303 | 00038190:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 000381a0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 000381a0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000381b0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000381b0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000381c0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000381c0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000381d0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000381d0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000381e0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000381e0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000381f0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000381f0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038200:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038200:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15168, 301 lines modified | Offset 15168, 301 lines modified | ||
| 0003b3f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b3f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b400:·2223·6964·6d31·3836·3222·2074·6162·696e··"#idm1862"·tabin | 0003b400:·2223·6964·6d31·3836·3222·2074·6162·696e··"#idm1862"·tabin | ||
| 0003b410:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b410:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b420:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b420:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b430:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b430:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b440:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b440:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b450:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b450:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b460:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b470:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b480:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b490:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b4a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b4b0:·6d31·3836·3222·3e3c·7072·653e·3c63·6f64··m1862"><pre><cod | |||
| 0003b4c0:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003b4d0:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003b4e0:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003b4f0:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003b500:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003b510:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003b520:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003b530:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003b540:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b550:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003b560:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003b570:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003b580:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003b590:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003b5a0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b5b0:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003b5c0:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003b5d0:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003b5e0:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003b5f0:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003b600:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003b610:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003b620:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003b630:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003b640:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003b650:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003b660:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b670:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003b680:·2027·2922·0a0a·2020·2020·0a20·2020·2064···')"..····.····d | |||
| 0003b690:·6e66·2072·6569·6e73·7461·6c6c·202d·7920··nf·reinstall·-y· | |||
| 0003b6a0:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003b6b0:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003b6c0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b6d0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b6e0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b6f0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b700:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b710:·2223·6964·6d31·3836·3322·2074·6162·696e··"#idm1863"·tabin | |||
| 0003b720:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b730:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b740:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b750:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b760:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b | 0003b770:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b | 0003b780:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b | 0003b790:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003b7a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003b7b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003b7c0:·2269·646d·3138·3633·223e·3c74·6162·6c65··"idm1863"><table | ||
| 0003b | 0003b7d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b7e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b7f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b800:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b810:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b820:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003b830:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003b840:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003b850:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003b860:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003b870:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003b880:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b890:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003b8a0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b | 0003b8b0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b | 0003b8c0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b | 0003b8d0:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b | 0003b8e0:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b | 0003b8f0:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b | 0003b900:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b | 0003b910:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b | 0003b920:·696e·7374·616c·6c5f·636d·643a·2064·6e66··install_cmd:·dnf | ||
| 0003b | 0003b930:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b | 0003b940:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003b | 0003b950:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b | 0003b960:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b | 0003b970:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b | 0003b980:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b | 0003b990:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b | 0003b9a0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b | 0003b9b0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b | 0003b9c0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003b9d0:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b | 0003b9e0:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b | 0003b9f0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b | 0003ba00:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b | 0003ba10:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b | 0003ba20:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003ba30:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b | 0003ba40:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b | 0003ba50:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b | 0003ba60:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b | 0003ba70:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b | 0003ba80:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b | 0003ba90:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b | 0003baa0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b | 0003bab0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b | 0003bac0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003b | 0003bad0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| Max diff block lines reached; 7218680/7244264 bytes (99.65%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | ····*·cpe:/o:fedoraproject:fedora:41 | 43 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:42 | 44 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:43 | 45 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:44 | 46 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 47 | ····*·cpe:/o:fedoraproject:fedora:45 | 47 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········3.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 99, 14 lines modified | Offset 99, 27 lines modified | ||
| 99 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 99 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 100 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 100 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 101 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 101 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 102 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 102 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 104 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 107 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 108 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 109 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 110 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 111 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 112 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 113 | fi | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 111 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 119 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 112 | ··set_fact: | 120 | ··set_fact: |
| Offset 233, 27 lines modified | Offset 246, 14 lines modified | ||
| 233 | ··-·PCI-DSSv4-11.5.2 | 246 | ··-·PCI-DSSv4-11.5.2 |
| 234 | ··-·high_complexity | 247 | ··-·high_complexity |
| 235 | ··-·high_severity | 248 | ··-·high_severity |
| 236 | ··-·medium_disruption | 249 | ··-·medium_disruption |
| 237 | ··-·no_reboot_needed | 250 | ··-·no_reboot_needed |
| 238 | ··-·restrict_strategy | 251 | ··-·restrict_strategy |
| 239 | ··-·rpm_verify_hashes | 252 | ··-·rpm_verify_hashes |
| 240 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 241 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 242 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 243 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 244 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 245 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 246 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 247 | fi | ||
| 248 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 253 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 249 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 254 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 250 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 255 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 251 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 256 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 252 | $·rpm·-qf·FILENAME | 257 | $·rpm·-qf·FILENAME |
| 253 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 258 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 274, 14 lines modified | Offset 274, 44 lines modified | ||
| 274 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 274 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 275 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 275 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 276 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 276 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 277 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 277 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 278 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 278 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 279 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 279 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 286 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 287 | declare·-A·SETPERMS_RPM_DICT | ||
| 288 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 289 | #·is·expected·by·the·RPM·database | ||
| 290 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 291 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 292 | do | ||
| 293 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 294 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 295 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 296 | ········do | ||
| 297 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 298 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 299 | ········done | ||
| 300 | done | ||
| 301 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 302 | #·correct·values | ||
| 303 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 304 | do | ||
| 305 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 306 | done | ||
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 286 | -·name:·Read·list·of·files·with·incorrect·permissions | 312 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 287 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 313 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 359, 44 lines modified | Offset 389, 14 lines modified | ||
| 359 | ··-·PCI-DSSv4-11.5.2 | 389 | ··-·PCI-DSSv4-11.5.2 |
| 360 | ··-·high_complexity | 390 | ··-·high_complexity |
| 361 | ··-·high_severity | 391 | ··-·high_severity |
| 362 | ··-·medium_disruption | 392 | ··-·medium_disruption |
| 363 | ··-·no_reboot_needed | 393 | ··-·no_reboot_needed |
| 364 | ··-·restrict_strategy | 394 | ··-·restrict_strategy |
| 365 | ··-·rpm_verify_permissions | 395 | ··-·rpm_verify_permissions |
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 667100/675162 bytes (98.81%) of diff not shown. | |||
| Offset 14333, 15 lines modified | Offset 14333, 15 lines modified | ||
| 00037fc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037fc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037fd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037fd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037fe0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037fe0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ff0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ff0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038000:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038000:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038010:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038010:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038020:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00038020:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00038030:·2d31·312d·303 | 00038030:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00038040:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038040:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038050:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038050:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038060:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038060:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038070:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038070:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038080:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038080:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038090:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038090:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000380a0:·5f67·726f·7570·5f61·7564·6974·696e·6722··_group_auditing" | 000380a0:·5f67·726f·7570·5f61·7564·6974·696e·6722··_group_auditing" |
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Apple·macOS·10.15 | 53 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Apple·macOS·10.15 |
| 54 | ··············Catalina | 54 | ··············Catalina |
| 55 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate | 55 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate |
| 56 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 56 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 57 | ····*·cpe:/o:apple:macos:10.15 | 57 | ····*·cpe:/o:apple:macos:10.15 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8i_\x8n_\x8g_\x8·_\x8w_\x8i_\x8t_\x8h_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8i_\x8n_\x8g_\x8·_\x8w_\x8i_\x8t_\x8h_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t |
| 63 | ·········1.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t_\x8d | 63 | ·········1.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t_\x8d |
| 64 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Group ·Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15· Group·contains | 65 | Group ·Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15· Group·contains |
| 66 | 2·groups·and·2·rules | 66 | 2·groups·and·2·rules |
| 67 | Group ·System·Accounting·with·audit· Group·contains·1·group·and·2·rules | 67 | Group ·System·Accounting·with·audit· Group·contains·1·group·and·2·rules |
| Offset 14602, 15 lines modified | Offset 14602, 15 lines modified | ||
| 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000390f0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 000390f0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00039100:·303 | 00039100:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14602, 15 lines modified | Offset 14602, 15 lines modified | ||
| 00039090:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00039090:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 000390a0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 000390a0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 000390b0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 000390b0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000390c0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000390c0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000390d0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000390d0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000390e0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000390e0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000390f0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000390f0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00039100:·342d·3131·2d30·3 | 00039100:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 00039110:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00039110:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00039120:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00039120:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039130:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039130:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039140:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039140:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039150:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039150:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039160:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039160:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039170:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00039170:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container | 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container |
| 77 | Platform·4· Group·contains·2·groups·and·1·rule | 77 | Platform·4· Group·contains·2·groups·and·1·rule |
| 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule | 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule |
| Offset 14602, 15 lines modified | Offset 14602, 15 lines modified | ||
| 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000390f0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 000390f0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00039100:·303 | 00039100:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container | 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container |
| 77 | Platform·4· Group·contains·2·groups·and·1·rule | 77 | Platform·4· Group·contains·2·groups·and·1·rule |
| 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule | 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule |
| Offset 14601, 15 lines modified | Offset 14601, 15 lines modified | ||
| 00039080:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039080:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039090:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039090:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 000390a0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 000390a0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 000390b0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 000390b0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 000390c0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 000390c0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 000390d0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 000390d0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 000390e0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 000390f0:·6f66·2032·3032·342d·3131·2d30·3 | 000390f0:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00039100:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039100:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00039110:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00039110:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00039120:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00039120:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00039130:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00039130:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00039140:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00039140:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00039150:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00039150:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00039160:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 00039160:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039170:·6173·206f·6620·3230·3234·2d31·312d·303 | 00039170:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039170:·6173·206f·6620·3230·3234·2d31·312d·303 | 00039170:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00039180:·6f66·2032·3032·342d·3131·2d30·3 | 00039180:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00039180:·6f66·2032·3032·342d·3131·2d30·3 | 00039180:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00039110:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00039120:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00039120:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00039130:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00039130:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039140:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039140:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039150:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039150:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039160:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039160:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039170:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039170:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039180:·3032·342d·3131·2d30·3 | 00039180:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 00039190:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039190:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000391a0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000391a0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000391b0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000391b0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000391c0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000391c0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000391d0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000391d0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000391e0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000391e0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000391f0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000391f0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00039100:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00039110:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00039110:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00039120:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00039120:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00039130:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00039130:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00039140:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00039140:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039150:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039150:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039160:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039160:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039170:·6620·3230·3234·2d31·312d·303 | 00039170:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00039180:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039180:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039190:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039190:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000391a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000391a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000391b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000391b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000391c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000391c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000391d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000391d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000391e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 000391e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14603, 15 lines modified | Offset 14603, 15 lines modified | ||
| 000390a0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 000390a0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 000390b0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 000390b0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 000390c0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 000390c0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 000390d0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 000390d0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 000390e0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 000390e0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 000390f0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 000390f0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00039100:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00039100:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00039110:·3230·3234·2d31·312d·303 | 00039110:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00039120:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00039120:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00039130:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00039130:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00039140:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00039140:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00039150:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00039150:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00039160:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00039160:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00039170:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00039170:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00039180:·7465·6e74·5f67·726f·7570·5f6f·7065·6e73··tent_group_opens | 00039180:·7465·6e74·5f67·726f·7570·5f6f·7065·6e73··tent_group_opens |
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 75 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 76 | ·········4.·_\x8R_\x8o_\x8l_\x8e_\x8-_\x8b_\x8a_\x8s_\x8e_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 76 | ·········4.·_\x8R_\x8o_\x8l_\x8e_\x8-_\x8b_\x8a_\x8s_\x8e_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 77 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8R_\x8e_\x8g_\x8i_\x8s_\x8t_\x8r_\x8y_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8R_\x8e_\x8g_\x8i_\x8s_\x8t_\x8r_\x8y_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 000393f0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00039400:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00039400:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00039410:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00039410:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00039420:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00039420:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00039430:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00039430:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039440:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039440:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039450:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039450:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039460:·2032·3032·342d·3131·2d30·3 | 00039460:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 00039470:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039470:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039480:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039480:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039490:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039490:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 000394a0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 000394a0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000394b0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000394b0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000394c0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000394c0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000394d0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 000394d0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000393f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00039400:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00039400:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00039410:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00039410:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00039420:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00039420:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00039430:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00039430:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00039440:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039440:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039450:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00039450:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00039460:·3131·2d30·3 | 00039460:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00039470:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00039470:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00039480:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00039480:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00039490:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00039490:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 000394a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 000394a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000394b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000394b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000394c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000394c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000394d0:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" | 000394d0:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000393f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00039400:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00039400:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00039410:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00039410:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00039420:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00039420:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00039430:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00039430:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00039440:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00039440:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00039450:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00039450:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00039460:·206f·6620·3230·3234·2d31·312d·303 | 00039460:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00039470:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039470:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039480:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00039480:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00039490:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00039490:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000394a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000394a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000394b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000394b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000394c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000394c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000394d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o | 000394d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 000393f0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00039400:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00039400:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00039410:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00039410:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00039420:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00039420:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00039430:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00039430:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00039440:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00039440:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00039450:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00039450:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00039460:·3234·2d31·312d·303 | 00039460:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00039470:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00039470:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00039480:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00039480:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00039490:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00039490:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000394a0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000394a0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000394b0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000394b0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000394c0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000394c0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 000394d0:·6e74·5f67·726f·7570·5f6f·7065·6e73·6869··nt_group_openshi | 000394d0:·6e74·5f67·726f·7570·5f6f·7065·6e73·6869··nt_group_openshi |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00039400:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00039410:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00039410:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00039420:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00039420:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00039430:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00039430:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00039440:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00039440:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00039450:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00039450:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00039460:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00039460:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00039470:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00039470:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00039480:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00039480:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00039490:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00039490:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000394a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000394a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000394b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000394b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000394c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000394c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000394d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000394d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000394e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000394e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00039400:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00039410:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00039410:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00039420:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00039420:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039430:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039430:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039440:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039440:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039450:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039450:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039460:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039460:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039470:·3032·342d·3131·2d30·3 | 00039470:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 00039480:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039480:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00039490:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00039490:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000394a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000394a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000394b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000394b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000394c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000394c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000394d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000394d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000394e0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000394e0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14658, 15 lines modified | Offset 14658, 15 lines modified | ||
| 00039410:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039410:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00039420:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00039420:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00039430:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00039430:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00039440:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00039440:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00039450:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00039450:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00039460:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039460:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039470:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00039470:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00039480:·303 | 00039480:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00039490:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039490:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000394a0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000394a0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000394b0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000394b0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000394c0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000394c0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000394d0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000394d0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000394e0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000394e0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 000394f0:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 000394f0:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00039400:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00039410:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00039410:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00039420:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00039420:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00039430:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00039430:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00039440:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00039440:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039450:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039450:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039460:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039460:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039470:·6620·3230·3234·2d31·312d·303 | 00039470:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00039480:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039480:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039490:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039490:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000394a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000394a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000394b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000394b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000394c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000394c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000394d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000394d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000394e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 000394e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14619, 15 lines modified | Offset 14619, 15 lines modified | ||
| 000391a0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 000391a0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000391b0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000391b0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000391c0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000391c0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000391d0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000391d0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000391e0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000391e0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039200:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00039200:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00039210:·303 | 00039210:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00039220:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039220:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039230:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039230:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039240:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039240:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039250:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039250:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039260:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039260:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039270:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039270:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039280:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039280:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 77 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 79 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14619, 15 lines modified | Offset 14619, 15 lines modified | ||
| 000391a0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000391a0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000391b0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000391b0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 000391c0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 000391c0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 000391d0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 000391d0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 000391e0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 000391e0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039200:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00039200:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00039210:·3131·2d30·3 | 00039210:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00039220:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00039220:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00039230:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00039230:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00039240:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00039240:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00039250:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00039250:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00039260:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00039260:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00039270:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00039270:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00039280:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" | 00039280:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" |
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 77 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 77 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 78 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 78 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 79 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 79 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039020:·2032·3032·342d·3131·2d30·3 | 00039020:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039020:·2032·3032·342d·3131·2d30·3 | 00039020:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8n_\x8e_\x8m_\x8e_\x8n_\x8t | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8n_\x8e_\x8m_\x8e_\x8n_\x8t |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039020:·6173·206f·6620·3230·3234·2d31·312d·303 | 00039020:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039020:·6173·206f·6620·3230·3234·2d31·312d·303 | 00039020:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038fb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038fc0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038fc0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038fd0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038fd0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038fe0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038fe0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038ff0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038ff0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039000:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039000:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039010:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039010:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039020:·6620·3230·3234·2d31·312d·303 | 00039020:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039030:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039040:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039040:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00039050:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00039050:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00039060:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00039060:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00039070:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00039070:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00039080:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00039080:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00039090:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 00039090:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00039000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00039000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00039010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00039010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00039020:·342d·3131·2d30·3 | 00039020:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 00039030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00039030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00039040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00039040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039090:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00039090:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fe0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fe0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038ff0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038ff0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00039000:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00039000:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00039010:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00039010:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039020:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039020:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039030:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039030:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039040:·2032·3032·342d·3131·2d30·3 | 00039040:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 00039050:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039050:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039060:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039060:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039070:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039070:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039080:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039080:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039090:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039090:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000390a0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000390a0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000390b0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 000390b0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038fd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038fe0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038fe0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038ff0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038ff0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00039000:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00039000:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00039010:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00039010:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00039020:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00039020:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00039030:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00039030:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00039040:·2d31·312d·303 | 00039040:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00039050:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00039050:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00039060:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00039060:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00039070:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00039070:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00039080:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00039080:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00039090:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00039090:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000390a0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000390a0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000390b0:·5f67·726f·7570·5f6f·7065·6e73·6869·6674··_group_openshift | 000390b0:·5f67·726f·7570·5f6f·7065·6e73·6869·6674··_group_openshift |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038fd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038fe0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038fe0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038ff0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038ff0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00039000:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00039000:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00039010:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00039010:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00039020:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00039020:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00039030:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00039040:·206f·6620·3230·3234·2d31·312d·303 | 00039040:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00039050:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039050:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039060:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00039060:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00039070:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00039070:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00039080:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00039080:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00039090:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00039090:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000390a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000390a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000390b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o | 000390b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o |
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038fd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038fe0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038fe0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038ff0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038ff0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039000:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039000:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039010:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039010:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039020:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039020:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039030:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039030:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039040:·3032·342d·3131·2d30·3 | 00039040:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 00039050:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039050:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00039060:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00039060:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00039070:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00039070:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00039080:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00039080:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00039090:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00039090:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000390a0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000390a0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000390b0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000390b0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | 00037e40:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037e50:·3 | 00037e50:·3729·0a20·2020·2020·2020·2020·2020·2020··7).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15053, 203 lines modified | Offset 15053, 203 lines modified | ||
| 0003acc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003acc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003acd0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | 0003acd0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | ||
| 0003ace0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ace0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003acf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003acf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ad00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ad00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ad10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ad10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ad20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ad20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ad30:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ad30:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | ||
| 0003ad40:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003ad50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ad60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ad70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ad80:·2269·646d·3536·3431·223e·3c74·6162·6c65··"idm5641"><table | |||
| 0003ad90:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ad40:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ad50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ad60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ad70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ad80:·3d22·6964·6d35·3634·3122·3e3c·7461·626c··="idm5641"><tabl | |||
| 0003ad90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ada0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ad | 0003ada0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003adc0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003add0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ade0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003adf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003a | 0003adb0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003adc0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003add0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ade0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003adf0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ae00:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ae10:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ae20:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ae30:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ae40:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003ae50:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003ae | 0003ae60:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003ae70:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003ae80:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003ae90:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003aea0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003aeb0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003aec0:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003aed0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003ae20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ae30:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ae40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ae50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ae60:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003ae70:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ae80:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003ae90:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003aea0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003aeb0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003aec0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003aed0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003aee0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003aef0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003af00:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003af10:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003af20:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003af30:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003af40:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003af50:·412d·5354·4947·2d4f·4c30·372d·3030·2d30··A-STIG-OL07-00-0 | |||
| 0003af60:·3230·3032·390a·2020·2d20·4e49·5354·2d38··20029.··-·NIST-8 | |||
| 0003af70:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003af80:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003af90:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003afa0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003afb0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003afc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003afd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003afe0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003aff0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b000:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b010:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b020:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b030:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b040:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b050:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b060:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b070:·7461·7267·6574·3d22·2369·646d·3536·3432··target="#idm5642 | |||
| 0003b080:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b090:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b0a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b0b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b0c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b0d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b0e0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b0f0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b100:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b110:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b120:·6522·2069·643d·2269·646d·3536·3432·223e··e"·id="idm5642"> | |||
| 0003b130:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b140:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b150:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b160:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b170:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b180:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b190:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b1a0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b1b0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b1c0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b1d0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b1e0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b1f0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b200:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b210:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b220:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b230:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| Max diff block lines reached; 20290242/20318034 bytes (99.86%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 115, 53 lines modified | Offset 115, 26 lines modified | ||
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | -·name:·Ensure·aide·is·installed | ||
| 128 | ··package: | ||
| 129 | ····name:·aide | ||
| 130 | ····state:·present | ||
| 131 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 132 | ··tags: | ||
| 133 | ··-·CJIS-5.10.1.3 | ||
| 134 | ··-·DISA-STIG-OL07-00-020029 | ||
| 135 | ··-·NIST-800-53-CM-6(a) | ||
| 136 | ··-·PCI-DSS-Req-11.5 | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | ||
| 138 | ··-·enable_strategy | ||
| 139 | ··-·low_complexity | ||
| 140 | ··-·low_disruption | ||
| 141 | ··-·medium_severity | ||
| 142 | ··-·no_reboot_needed | ||
| 143 | ··-·package_aide_installed | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | include·install_aide | 127 | include·install_aide |
| 150 | class·install_aide·{ | 128 | class·install_aide·{ |
| 151 | ··package·{·'aide': | 129 | ··package·{·'aide': |
| 152 | ····ensure·=>·'installed', | 130 | ····ensure·=>·'installed', |
| 153 | ··} | 131 | ··} |
| 154 | } | 132 | } |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | 138 | #·Remediation·is·applicable·only·in·certain·platforms |
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 139 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 169, 21 lines modified | Offset 142, 48 lines modified | ||
| 169 | if·!·rpm·-q·--quiet·"aide"·;·then | 142 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 170 | ····yum·install·-y·"aide" | 143 | ····yum·install·-y·"aide" |
| 171 | fi | 144 | fi |
| 172 | else | 145 | else |
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 174 | fi | 147 | fi |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | [[packages]] | ||
| 150 | name·=·"aide" | ||
| 151 | version·=·"*" | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 180 | package·--add=aide | 157 | package·--add=aide |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | -·name:·Ensure·aide·is·installed | ||
| 164 | ··package: | ||
| 165 | ····name:·aide | ||
| 166 | ····state:·present | ||
| 167 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 168 | ··tags: | ||
| 169 | ··-·CJIS-5.10.1.3 | ||
| 170 | ··-·DISA-STIG-OL07-00-020029 | ||
| 171 | ··-·NIST-800-53-CM-6(a) | ||
| 172 | ··-·PCI-DSS-Req-11.5 | ||
| 173 | ··-·PCI-DSSv4-11.5.2 | ||
| 174 | ··-·enable_strategy | ||
| 175 | ··-·low_complexity | ||
| 176 | ··-·low_disruption | ||
| 177 | ··-·medium_severity | ||
| 178 | ··-·no_reboot_needed | ||
| 179 | ··-·package_aide_installed | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 181 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/sbin/aide·--init | 182 | $·sudo·/usr/sbin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 184 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 185 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 186 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 208, 14 lines modified | Offset 208, 28 lines modified | ||
| 208 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 208 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 209 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 209 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 210 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 210 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 211 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 211 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 212 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 212 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 213 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1806025/1811950 bytes (99.67%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | 00037e40:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037e50:·3 | 00037e50:·3729·0a20·2020·2020·2020·2020·2020·2020··7).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15060, 202 lines modified | Offset 15060, 202 lines modified | ||
| 0003ad30:·6765·743d·2223·6964·6d35·3634·3122·2074··get="#idm5641"·t | 0003ad30:·6765·743d·2223·6964·6d35·3634·3122·2074··get="#idm5641"·t | ||
| 0003ad40:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ad40:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ad50:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ad50:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ad60:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ad60:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003ad70:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003ad70:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003ad80:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003ad80:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ad90:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ad90:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ada0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003adb0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003adc0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ada0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003adb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003adc0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003add0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ade0:·2069·643d·2269·646d·3536·3431·223e·3c74···id="idm5641"><t | |||
| 0003adf0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003ae00:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ae10:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ae20:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ae30:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ae40:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ae50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ae60:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ae70:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ae80:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ae90:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003aea0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003aeb0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003aec0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003aed0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003aee0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003aef0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003af00:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003af10:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003af20:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003af30:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003af40:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003af50:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003af60:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003af70:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003af80:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003af90:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003afa0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003afb0:·4449·5341·2d53·5449·472d·4f4c·3037·2d30··DISA-STIG-OL07-0 | |||
| 0003afc0:·302d·3032·3030·3239·0a20·202d·204e·4953··0-020029.··-·NIS | |||
| 0003afd0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003afe0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003aff0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b000:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b010:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b020:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b030:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b040:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b050:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b060:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b070:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b080:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b090:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b0a0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b0b0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003 | 0003add0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003ade0:·6964·3d22·6964·6d35·3634·3122·3e3c·7461··id="idm5641"><ta | |||
| 0003adf0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ae00:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003ae10:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003ae20:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003ae30:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003ae40:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003ae50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ae60:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003ae70:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ae80:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003ae90:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003aea0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003aeb0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003aec0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003aed0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003aee0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003aef0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b0d0:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b0e0:·3634·3222·2074·6162·696e·6465·783d·2230··642"·tabindex="0 | |||
| 0003b0f0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b100:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b110:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b120:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b130:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b140:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b150:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b160:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b170:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b180:·6170·7365·2220·6964·3d22·6964·6d35·3634··apse"·id="idm564 | |||
| 0003b190:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b1a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b1b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b1c0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b1d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b1e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b1f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b200:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b210:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b220:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b230:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b240:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b250:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b260:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b270:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b280:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003 | 0003af00:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | ||
| 0003af10:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003af20:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003af30:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| Max diff block lines reached; 20611263/20638917 bytes (99.87%) of diff not shown. | |||
| Offset 14304, 15 lines modified | Offset 14304, 15 lines modified | ||
| 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | 00037e50:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037e60:·3 | 00037e60:·3729·0a20·2020·2020·2020·2020·2020·2020··7).············· | ||
| 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15044, 203 lines modified | Offset 15044, 203 lines modified | ||
| 0003ac30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ac30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ac40:·743d·2223·6964·6d35·3634·3122·2074·6162··t="#idm5641"·tab | 0003ac40:·743d·2223·6964·6d35·3634·3122·2074·6162··t="#idm5641"·tab | ||
| 0003ac50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ac50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ac60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ac60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ac70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ac70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ac80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ac80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ac90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ac90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003aca0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003aca0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | ||
| 0003acb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003acc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003acd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003ace0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003acf0:·643d·2269·646d·3536·3431·223e·3c74·6162··d="idm5641"><tab | |||
| 0003ad00:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003ad10:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ad20:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ad30:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ad40:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ad50:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ad60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a | 0003acb0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | ||
| 0003acc0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003acd0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ace0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003acf0:·3d22·6964·6d35·3634·3122·3e3c·7461·626c··="idm5641"><tabl | |||
| 0003ad00:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ad10:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ad20:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ad30:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ad40:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ad50:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ad60:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ad70:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ad80:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ad90:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ada0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003adb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003adc0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ad | 0003add0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003ade0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003adf0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003ae00:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003ad90:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ada0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003adb0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003adc0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003add0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003ade0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003adf0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003ae00:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003ae10:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003ae20:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003ae30:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003ae40:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003ae50:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003ae60:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003ae70:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003ae80:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003ae90:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003aea0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003aeb0:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003aec0:·5341·2d53·5449·472d·4f4c·3037·2d30·302d··SA-STIG-OL07-00- | |||
| 0003aed0:·3032·3030·3239·0a20·202d·204e·4953·542d··020029.··-·NIST- | |||
| 0003aee0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003aef0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003af00:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003af10:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003af20:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003af30:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003af40:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003af50:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003af60:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003af70:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003af80:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003af90:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003afa0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003afb0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003afc0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003afd0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003afe0:·2d74·6172·6765·743d·2223·6964·6d35·3634··-target="#idm564 | |||
| 0003aff0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b000:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b010:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b020:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b030:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b040:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b050:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b060:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b070:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b080:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b090:·7365·2220·6964·3d22·6964·6d35·3634·3222··se"·id="idm5642" | |||
| 0003b0a0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b0b0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b0c0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b0d0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b0e0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b0f0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b100:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b110:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b120:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b130:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b140:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b150:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b160:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b170:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b180:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b190:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003 | 0003ae10:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | ||
| 0003ae20:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003ae30:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003ae40:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| Max diff block lines reached; 8713491/8741283 bytes (99.68%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 53 lines modified | Offset 113, 26 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | -·name:·Ensure·aide·is·installed | ||
| 126 | ··package: | ||
| 127 | ····name:·aide | ||
| 128 | ····state:·present | ||
| 129 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 130 | ··tags: | ||
| 131 | ··-·CJIS-5.10.1.3 | ||
| 132 | ··-·DISA-STIG-OL07-00-020029 | ||
| 133 | ··-·NIST-800-53-CM-6(a) | ||
| 134 | ··-·PCI-DSS-Req-11.5 | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | ||
| 136 | ··-·enable_strategy | ||
| 137 | ··-·low_complexity | ||
| 138 | ··-·low_disruption | ||
| 139 | ··-·medium_severity | ||
| 140 | ··-·no_reboot_needed | ||
| 141 | ··-·package_aide_installed | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | include·install_aide | 125 | include·install_aide |
| 148 | class·install_aide·{ | 126 | class·install_aide·{ |
| 149 | ··package·{·'aide': | 127 | ··package·{·'aide': |
| 150 | ····ensure·=>·'installed', | 128 | ····ensure·=>·'installed', |
| 151 | ··} | 129 | ··} |
| 152 | } | 130 | } |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 136 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 21 lines modified | Offset 140, 48 lines modified | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | 140 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 168 | ····yum·install·-y·"aide" | 141 | ····yum·install·-y·"aide" |
| 169 | fi | 142 | fi |
| 170 | else | 143 | else |
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 144 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 172 | fi | 145 | fi |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | package·--add=aide | 155 | package·--add=aide |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | -·name:·Ensure·aide·is·installed | ||
| 162 | ··package: | ||
| 163 | ····name:·aide | ||
| 164 | ····state:·present | ||
| 165 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 166 | ··tags: | ||
| 167 | ··-·CJIS-5.10.1.3 | ||
| 168 | ··-·DISA-STIG-OL07-00-020029 | ||
| 169 | ··-·NIST-800-53-CM-6(a) | ||
| 170 | ··-·PCI-DSS-Req-11.5 | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | ||
| 172 | ··-·enable_strategy | ||
| 173 | ··-·low_complexity | ||
| 174 | ··-·low_disruption | ||
| 175 | ··-·medium_severity | ||
| 176 | ··-·no_reboot_needed | ||
| 177 | ··-·package_aide_installed | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 180 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 206, 14 lines modified | Offset 206, 28 lines modified | ||
| 206 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 206 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 207 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 207 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 209 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 209 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 212 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 212 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 952264/958308 bytes (99.37%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037dd0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037de0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037de0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037df0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037df0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037e00:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037e00:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037e10:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037e10:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037e20:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037e20:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037e30:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e40:·6f66·2032·3032·342d·3131·2d30·3 | 00037e40:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037e50:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e60:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e60:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e70:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e70:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e80:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e80:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e90:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e90:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037ea0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037ea0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037eb0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037eb0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 14918, 203 lines modified | Offset 14918, 203 lines modified | ||
| 0003a450:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003a450:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003a460:·3130·3335·3022·2074·6162·696e·6465·783d··10350"·tabindex= | 0003a460:·3130·3335·3022·2074·6162·696e·6465·783d··10350"·tabindex= | ||
| 0003a470:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003a470:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003a480:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003a480:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003a490:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003a490:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003a4a0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003a4a0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003a4b0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003a4b0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003a4c0:·6564·6961·7469·6f6e·20 | 0003a4c0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003a4d0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003a4e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003a4f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003a500:·6170·7365·2220·6964·3d22·6964·6d31·3033··apse"·id="idm103 | |||
| 0003a510:·3530·223e·3c70·7265·3e3c·636f·6465·3e23··50"><pre><code># | |||
| 0003a520:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003a530:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003a540:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003a550:·6f72·6d73·0a69·6620·7270·6d20·2d2d·7175··orms.if·rpm·--qu | |||
| 0003a560:·6965·7420·2d71·2079·756d·3b20·7468·656e··iet·-q·yum;·then | |||
| 0003a570:·0a0a·2320·5374·7269·7020·616e·7920·7365··..#·Strip·any·se | |||
| 0003a580:·6172·6368·2063·6861·7261·6374·6572·7320··arch·characters· | |||
| 0003a590:·696e·2074·6865·206b·6579·2061·7267·2073··in·the·key·arg·s | |||
| 0003a5a0:·6f20·7468·6174·2074·6865·206b·6579·2063··o·that·the·key·c | |||
| 0003a5b0:·616e·2062·6520·7265·706c·6163·6564·2077··an·be·replaced·w | |||
| 0003a5c0:·6974·686f·7574·0a23·2061·6464·696e·6720··ithout.#·adding· | |||
| 0003a5d0:·616e·7920·7365·6172·6368·2063·6861·7261··any·search·chara | |||
| 0003a5e0:·6374·6572·7320·746f·2074·6865·2063·6f6e··cters·to·the·con | |||
| 0003a5f0:·6669·6720·6669·6c65·2e0a·7374·7269·7070··fig·file..stripp | |||
| 0003a600:·6564·5f6b·6579·3d24·2873·6564·2027·732f··ed_key=$(sed·'s/ | |||
| 0003a610:·5b5c·5e3d·5c24·2c3b·2b5d·2a2f·2f67·2720··[\^=\$,;+]*//g'· | |||
| 0003a620:·266c·743b·266c·743b·266c·743b·2022·5e67··<<<·"^g | |||
| 0003a630:·7067·6368·6563·6b22·290a·0a23·2073·6865··pgcheck")..#·she | |||
| 0003a640:·6c6c·6368·6563·6b20·6469·7361·626c·653d··llcheck·disable= | |||
| 0003a4d0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003a4e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a4f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003a500:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003a510:·3130·3335·3022·3e3c·7461·626c·6520·636c··10350"><table·cl | |||
| 0003a520:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003a530:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003a540:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003a550:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003a560:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003a570:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003a580:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003a590:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 0003a5a0:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 0003a5b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003a5c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003a5d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003a5e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | |||
| 0003a5f0:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | |||
| 0003a600:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003a610:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003a620:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003a630:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003a640:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003a650:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003a660:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | |||
| 0003a670:·2e31·0a20·202d·2044·4953·412d·5354·4947··.1.··-·DISA-STIG | |||
| 0003a680:·2d4f·4c30·372d·3030·2d30·3230·3035·300a··-OL07-00-020050. | |||
| 0003a690:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003a6a0:·2d33·2e34·2e38·0a20·202d·204e·4953·542d··-3.4.8.··-·NIST- | |||
| 0003a6b0:·3830·302d·3533·2d43·4d2d·3131·2861·290a··800-53-CM-11(a). | |||
| 0003a6c0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003a6d0:·434d·2d31·3128·6229·0a20·202d·204e·4953··CM-11(b).··-·NIS | |||
| 0003a6e0:·542d·3830·302d·3533·2d43·4d2d·3528·3329··T-800-53-CM-5(3) | |||
| 0003a6f0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003a700:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| 0003a710:·542d·3830·302d·3533·2d53·412d·3132·0a20··T-800-53-SA-12.· | |||
| 0003a720:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003a730:·412d·3132·2831·3029·0a20·202d·204e·4953··A-12(10).··-·NIS | |||
| 0003a740:·542d·3830·302d·3533·2d53·432d·3132·0a20··T-800-53-SC-12.· | |||
| 0003a750:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003a760:·432d·3132·2833·290a·2020·2d20·4e49·5354··C-12(3).··-·NIST | |||
| 0003a770:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | |||
| 0003a780:·2050·4349·2d44·5353·2d52·6571·2d36·2e32···PCI-DSS-Req-6.2 | |||
| 0003a790:·0a20·202d·2050·4349·2d44·5353·7634·2d36··.··-·PCI-DSSv4-6 | |||
| 0003a7a0:·2e33·2e33·0a20·202d·2063·6f6e·6669·6775··.3.3.··-·configu | |||
| 0003a7b0:·7265·5f73·7472·6174·6567·790a·2020·2d20··re_strategy.··-· | |||
| 0003a7c0:·656e·7375·7265·5f67·7067·6368·6563·6b5f··ensure_gpgcheck_ | |||
| 0003a7d0:·676c·6f62·616c·6c79·5f61·6374·6976·6174··globally_activat | |||
| 0003a7e0:·6564·0a20·202d·2068·6967·685f·7365·7665··ed.··-·high_seve | |||
| 0003a7f0:·7269·7479·0a20·202d·206c·6f77·5f63·6f6d··rity.··-·low_com | |||
| 0003a800:·706c·6578·6974·790a·2020·2d20·6d65·6469··plexity.··-·medi | |||
| 0003a810:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | |||
| 0003a820:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003a830:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003a840:·7265·2047·5047·2063·6865·636b·2069·7320··re·GPG·check·is· | |||
| 0003a850:·676c·6f62·616c·6c79·2061·6374·6976·6174··globally·activat | |||
| 0003a860:·6564·0a20·2069·6e69·5f66·696c·653a·0a20··ed.··ini_file:.· | |||
| 0003a870:·2020·2064·6573·743a·202f·6574·632f·7975·····dest:·/etc/yu | |||
| 0003a880:·6d2e·636f·6e66·0a20·2020·2073·6563·7469··m.conf.····secti | |||
| 0003a890:·6f6e·3a20·6d61·696e·0a20·2020·206f·7074··on:·main.····opt | |||
| 0003a8a0:·696f·6e3a·2067·7067·6368·6563·6b0a·2020··ion:·gpgcheck.·· | |||
| 0003a8b0:·2020·7661·6c75·653a·2031·0a20·2020·206e····value:·1.····n | |||
| 0003a8c0:·6f5f·6578·7472·615f·7370·6163·6573·3a20··o_extra_spaces:· | |||
| 0003a8d0:·7472·7565·0a20·2020·2063·7265·6174·653a··true.····create: | |||
| 0003a8e0:·2066·616c·7365·0a20·2077·6865·6e3a·2027···false.··when:·' | |||
| 0003a8f0:·2279·756d·2220·696e·2061·6e73·6962·6c65··"yum"·in·ansible | |||
| 0003a900:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003a910:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003a920:·532d·352e·3130·2e34·2e31·0a20·202d·2044··S-5.10.4.1.··-·D | |||
| 0003a930:·4953·412d·5354·4947·2d4f·4c30·372d·3030··ISA-STIG-OL07-00 | |||
| 0003a940:·2d30·3230·3035·300a·2020·2d20·4e49·5354··-020050.··-·NIST | |||
| 0003a950:·2d38·3030·2d31·3731·2d33·2e34·2e38·0a20··-800-171-3.4.8.· | |||
| 0003a960:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003a970:·4d2d·3131·2861·290a·2020·2d20·4e49·5354··M-11(a).··-·NIST | |||
| 0003a980:·2d38·3030·2d35·332d·434d·2d31·3128·6229··-800-53-CM-11(b) | |||
| 0003a990:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003a9a0:·2d43·4d2d·3528·3329·0a20·202d·204e·4953··-CM-5(3).··-·NIS | |||
| 0003a9b0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| Max diff block lines reached; 3300753/3328545 bytes (99.17%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 111, 14 lines modified | Offset 111, 42 lines modified | ||
| 111 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 111 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020050 | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020050 |
| 115 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 115 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221710r877463_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221710r877463_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·rpm·--quiet·-q·yum;·then | ||
| 121 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 122 | #·adding·any·search·characters·to·the·config·file. | ||
| 123 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 124 | #·shellcheck·disable=SC2059 | ||
| 125 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 126 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 127 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 128 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 129 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 130 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 131 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 132 | yum.conf" | ||
| 133 | else | ||
| 134 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 135 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 136 | ····fi | ||
| 137 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 138 | fi | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 123 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 148 | ··package_facts: |
| Offset 171, 42 lines modified | Offset 199, 14 lines modified | ||
| 171 | ··-·PCI-DSSv4-6.3.3 | 199 | ··-·PCI-DSSv4-6.3.3 |
| 172 | ··-·configure_strategy | 200 | ··-·configure_strategy |
| 173 | ··-·ensure_gpgcheck_globally_activated | 201 | ··-·ensure_gpgcheck_globally_activated |
| 174 | ··-·high_severity | 202 | ··-·high_severity |
| 175 | ··-·low_complexity | 203 | ··-·low_complexity |
| 176 | ··-·medium_disruption | 204 | ··-·medium_disruption |
| 177 | ··-·no_reboot_needed | 205 | ··-·no_reboot_needed |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·rpm·--quiet·-q·yum;·then | ||
| 181 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 182 | #·adding·any·search·characters·to·the·config·file. | ||
| 183 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 184 | #·shellcheck·disable=SC2059 | ||
| 185 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 186 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 187 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 188 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 189 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 190 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 191 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 192 | yum.conf" | ||
| 193 | else | ||
| 194 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 195 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 196 | ····fi | ||
| 197 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 198 | fi | ||
| 199 | else | ||
| 200 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 201 | fi | ||
| 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·f\x8fo\x8or\x8r·L\x8Lo\x8oc\x8ca\x8al\x8l·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·f\x8fo\x8or\x8r·L\x8Lo\x8oc\x8ca\x8al\x8l·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 203 | yum·should·be·configured·to·verify·the·signature(s)·of·local·packages·prior·to·installation. | 207 | yum·should·be·configured·to·verify·the·signature(s)·of·local·packages·prior·to·installation. |
| 204 | To·configure·yum·to·verify·signatures·of·local·packages,·set·the·localpkg_gpgcheck·to·1·in·/ | 208 | To·configure·yum·to·verify·signatures·of·local·packages,·set·the·localpkg_gpgcheck·to·1·in·/ |
| 205 | etc/yum.conf. | 209 | etc/yum.conf. |
| 206 | ············Changes·to·any·software·components·can·have·significant·effects·to·the·overall | 210 | ············Changes·to·any·software·components·can·have·significant·effects·to·the·overall |
| 207 | ············security·of·the·operating·system.·This·requirement·ensures·the·software·has·not | 211 | ············security·of·the·operating·system.·This·requirement·ensures·the·software·has·not |
| 208 | ············been·tampered·and·has·been·provided·by·a·trusted·vendor. | 212 | ············been·tampered·and·has·been·provided·by·a·trusted·vendor. |
| Offset 228, 14 lines modified | Offset 228, 42 lines modified | ||
| 228 | ············_\x8n_\x8i_\x8s_\x8t···········CM-11(a),·CM-11(b),·CM-6(a),·CM-5(3),·SA-12,·SA-12(10) | 228 | ············_\x8n_\x8i_\x8s_\x8t···········CM-11(a),·CM-11(b),·CM-6(a),·CM-5(3),·SA-12,·SA-12(10) |
| 229 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 229 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 230 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 230 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 231 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 231 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020060 | 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020060 |
| 233 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 233 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221711r877463_rule | 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221711r877463_rule |
| 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 236 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 237 | if·rpm·--quiet·-q·yum;·then | ||
| 238 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 239 | #·adding·any·search·characters·to·the·config·file. | ||
| 240 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^localpkg_gpgcheck") | ||
| 241 | #·shellcheck·disable=SC2059 | ||
| 242 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 243 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 244 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 245 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 246 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^localpkg_gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 247 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 248 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^localpkg_gpgcheck\\>.*/$escaped_formatted_output/ | ||
| 249 | gi"·"/etc/yum.conf" | ||
| Max diff block lines reached; 209538/216351 bytes (96.85%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037d80:·3032·342d·3131·2d30·3 | 00037d80:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15122, 310 lines modified | Offset 15122, 310 lines modified | ||
| 0003b110:·2d74·6172·6765·743d·2223·6964·6d35·3239··-target="#idm529 | 0003b110:·2d74·6172·6765·743d·2223·6964·6d35·3239··-target="#idm529 | ||
| 0003b120:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | 0003b120:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003b130:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b130:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b140:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b140:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b150:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b150:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b160:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b160:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b170:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b170:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b180:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b190:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b1a0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b1b0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b1c0:·2220·6964·3d22·6964·6d35·3239·3922·3e3c··"·id="idm5299">< | |||
| 0003b1d0:·7072·653e·3c63·6f64·653e·0a23·2046·696e··pre><code>.#·Fin | |||
| 0003b1e0:·6420·7768·6963·6820·6669·6c65·7320·6861··d·which·files·ha | |||
| 0003b1f0:·7665·2069·6e63·6f72·7265·6374·2068·6173··ve·incorrect·has | |||
| 0003b200:·6820·286e·6f74·2069·6e20·2f65·7463·2c20··h·(not·in·/etc,· | |||
| 0003b210:·6265·6361·7573·6520·6f66·2074·6865·2073··because·of·the·s | |||
| 0003b220:·7973·7465·6d20·7265·6c61·7465·6420·636f··ystem·related·co | |||
| 0003b230:·6e66·6967·2066·696c·6573·2920·616e·6420··nfig·files)·and· | |||
| 0003b240:·7468·656e·2067·6574·2066·696c·6573·206e··then·get·files·n | |||
| 0003b250:·616d·6573·0a66·696c·6573·5f77·6974·685f··ames.files_with_ | |||
| 0003b260:·696e·636f·7272·6563·745f·6861·7368·3d22··incorrect_hash=" | |||
| 0003b270:·2428·7270·6d20·2d56·6120·2d2d·6e6f·636f··$(rpm·-Va·--noco | |||
| 0003b280:·6e66·6967·207c·2067·7265·7020·2d45·2027··nfig·|·grep·-E·' | |||
| 0003b290:·5e2e·2e35·2720·7c20·6177·6b20·277b·7072··^..5'·|·awk·'{pr | |||
| 0003b2a0:·696e·7420·244e·467d·2720·2922·0a0a·6966··int·$NF}'·)"..if | |||
| 0003b2b0:·205b·202d·6e20·2224·6669·6c65·735f·7769···[·-n·"$files_wi | |||
| 0003b2c0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003b2d0:·6822·205d·3b20·7468·656e·0a20·2020·2023··h"·];·then.····# | |||
| 0003b2e0:·2046·726f·6d20·6669·6c65·7320·6e61·6d65···From·files·name | |||
| 0003b2f0:·7320·6765·7420·7061·636b·6167·6520·6e61··s·get·package·na | |||
| 0003b300:·6d65·7320·616e·6420·6368·616e·6765·206e··mes·and·change·n | |||
| 0003b310:·6577·6c69·6e65·2074·6f20·7370·6163·652c··ewline·to·space, | |||
| 0003b320:·2062·6563·6175·7365·2072·706d·2077·7269···because·rpm·wri | |||
| 0003b330:·7465·7320·6561·6368·2070·6163·6b61·6765··tes·each·package | |||
| 0003b340:·2074·6f20·6e65·7720·6c69·6e65·0a20·2020···to·new·line.··· | |||
| 0003b350:·2070·6163·6b61·6765·735f·746f·5f72·6569···packages_to_rei | |||
| 0003b360:·6e73·7461·6c6c·3d22·2428·7270·6d20·2d71··nstall="$(rpm·-q | |||
| 0003b370:·6620·2466·696c·6573·5f77·6974·685f·696e··f·$files_with_in | |||
| 0003b380:·636f·7272·6563·745f·6861·7368·207c·2074··correct_hash·|·t | |||
| 0003b390:·7220·275c·6e27·2027·2027·2922·0a0a·2020··r·'\n'·'·')"..·· | |||
| 0003b3a0:·2020·0a20·2020·2079·756d·2072·6569·6e73····.····yum·reins | |||
| 0003b3b0:·7461·6c6c·202d·7920·2470·6163·6b61·6765··tall·-y·$package | |||
| 0003b3c0:·735f·746f·5f72·6569·6e73·7461·6c6c·0a20··s_to_reinstall.· | |||
| 0003b3d0:·2020·200a·6669·0a3c·2f63·6f64·653e·3c2f·····.fi.</code></ | |||
| 0003b3e0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b3f0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b400:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b410:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b420:·2d74·6172·6765·743d·2223·6964·6d35·3330··-target="#idm530 | |||
| 0003b430:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003b440:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b450:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b460:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b470:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b480:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b | 0003b490:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003b | 0003b4a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b | 0003b4b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b | 0003b4c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b | 0003b4d0:·7073·6522·2069·643d·2269·646d·3533·3030··pse"·id="idm5300 | ||
| 0003b | 0003b4e0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b | 0003b4f0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003b | 0003b500:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b | 0003b510:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003b | 0003b520:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003b | 0003b530:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b | 0003b540:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003b | 0003b550:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b | 0003b560:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003b | 0003b570:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b580:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b | 0003b590:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b | 0003b5a0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b | 0003b5b0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003b | 0003b5c0:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003b | 0003b5d0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b2d0:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | |||
| 0003b2e0:·743a·2050·6163·6b61·6765·206d·616e·6167··t:·Package·manag | |||
| 0003b2f0:·6572·2072·6569·6e73·7461·6c6c·2063·6f6d··er·reinstall·com | |||
| 0003b300:·6d61·6e64·270a·2020·7365·745f·6661·6374··mand'.··set_fact | |||
| 0003b310:·3a0a·2020·2020·7061·636b·6167·655f·6d61··:.····package_ma | |||
| 0003b320:·6e61·6765·725f·7265·696e·7374·616c·6c5f··nager_reinstall_ | |||
| 0003b330:·636d·643a·2079·756d·2072·6569·6e73·7461··cmd:·yum·reinsta | |||
| 0003b340:·6c6c·202d·790a·2020·7768·656e·3a20·616e··ll·-y.··when:·an | |||
| 0003b350:·7369·626c·655f·6469·7374·7269·6275·7469··sible_distributi | |||
| 0003b360:·6f6e·2069·6e20·5b20·2246·6564·6f72·6122··on·in·[·"Fedora" | |||
| 0003b370:·2c20·2252·6564·4861·7422·2c20·2243·656e··,·"RedHat",·"Cen | |||
| 0003b380:·744f·5322·2c20·224f·7261·636c·654c·696e··tOS",·"OracleLin | |||
| 0003b390:·7578·2220·5d0a·2020·7461·6773·3a0a·2020··ux"·].··tags:.·· | |||
| 0003b3a0:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | |||
| 0003b3b0:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | |||
| 0003b3c0:·3037·2d30·302d·3031·3030·3230·0a20·202d··07-00-010020.··- | |||
| 0003b3d0:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | |||
| 0003b3e0:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | |||
| 0003b3f0:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | |||
| 0003b400:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | |||
| 0003b410:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | |||
| 0003b420:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | |||
| 0003b430:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b440:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | |||
| 0003b450:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | |||
| 0003b460:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | |||
| 0003b470:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b480:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | |||
| 0003b490:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b4a0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b4b0:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | |||
| 0003b4c0:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | |||
| 0003b4d0:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | |||
| 0003b4e0:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | |||
| Max diff block lines reached; 8581467/8600565 bytes (99.78%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:7 | 44 | ····*·cpe:/o:oracle:linux:7 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 98, 14 lines modified | Offset 98, 27 lines modified | ||
| 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 102 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 102 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 106 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 107 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 108 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 109 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 110 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 111 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 112 | fi | ||
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 110 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 118 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 111 | ··set_fact: | 119 | ··set_fact: |
| Offset 237, 27 lines modified | Offset 250, 14 lines modified | ||
| 237 | ··-·PCI-DSSv4-11.5.2 | 250 | ··-·PCI-DSSv4-11.5.2 |
| 238 | ··-·high_complexity | 251 | ··-·high_complexity |
| 239 | ··-·high_severity | 252 | ··-·high_severity |
| 240 | ··-·medium_disruption | 253 | ··-·medium_disruption |
| 241 | ··-·no_reboot_needed | 254 | ··-·no_reboot_needed |
| 242 | ··-·restrict_strategy | 255 | ··-·restrict_strategy |
| 243 | ··-·rpm_verify_hashes | 256 | ··-·rpm_verify_hashes |
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 245 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 246 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 247 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 248 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 249 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 250 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 251 | fi | ||
| 252 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 257 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 253 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 258 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 254 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 259 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 255 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 260 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 256 | $·rpm·-qf·FILENAME | 261 | $·rpm·-qf·FILENAME |
| 257 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 262 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 280, 14 lines modified | Offset 280, 44 lines modified | ||
| 280 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 280 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 281 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 281 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 283 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 283 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 284 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 284 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 285 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 285 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 286 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 286 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 288 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 289 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 290 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 291 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 292 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 293 | declare·-A·SETPERMS_RPM_DICT | ||
| 294 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 295 | #·is·expected·by·the·RPM·database | ||
| 296 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 297 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 298 | do | ||
| 299 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 300 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 301 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 302 | ········do | ||
| 303 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 304 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 305 | ········done | ||
| 306 | done | ||
| 307 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 308 | #·correct·values | ||
| 309 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 310 | do | ||
| 311 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 312 | done | ||
| 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 288 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 289 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 290 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 291 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 292 | -·name:·Read·list·of·files·with·incorrect·permissions | 318 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 293 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 319 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 368, 44 lines modified | Offset 398, 14 lines modified | ||
| 368 | ··-·PCI-DSSv4-11.5.2 | 398 | ··-·PCI-DSSv4-11.5.2 |
| 369 | ··-·high_complexity | 399 | ··-·high_complexity |
| 370 | ··-·high_severity | 400 | ··-·high_severity |
| 371 | ··-·medium_disruption | 401 | ··-·medium_disruption |
| 372 | ··-·no_reboot_needed | 402 | ··-·no_reboot_needed |
| 373 | ··-·restrict_strategy | 403 | ··-·restrict_strategy |
| 374 | ··-·rpm_verify_permissions | 404 | ··-·rpm_verify_permissions |
| 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 844272/852059 bytes (99.09%) of diff not shown. | |||
| Offset 14330, 15 lines modified | Offset 14330, 15 lines modified | ||
| 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038000:·3234·2d31·312d·303 | 00038000:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15073, 232 lines modified | Offset 15073, 232 lines modified | ||
| 0003ae00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ae00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ae10:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | 0003ae10:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | ||
| 0003ae20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ae20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ae30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ae30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ae40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ae40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ae50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ae50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ae60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ae60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ae70:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ae70:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | ||
| 0003ae80:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003ae90:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003aea0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003aeb0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003aec0:·2269·646d·3631·3732·223e·3c74·6162·6c65··"idm6172"><table | |||
| 0003aed0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ae80:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ae90:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003aea0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003aeb0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003aec0:·3d22·6964·6d36·3137·3222·3e3c·7461·626c··="idm6172"><tabl | |||
| 0003aed0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aee0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ae | 0003aee0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003af00:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003af10:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003af20:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003af30:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003a | 0003aef0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003af00:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003af10:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003af20:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003af30:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003af40:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003af50:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003af60:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003af70:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003af80:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003af90:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003af | 0003afa0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003afb0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003afc0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003af60:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003af70:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003af80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003af90:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003afa0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003afb0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003afc0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003afd0:·6 | 0003afd0:·6c5f·6472·6163·7574·2d66·6970·730a·0a63··l_dracut-fips..c | ||
| 0003afe0:·6c61·7373·2069·6e73·7461·6c6c·5f64·7261··lass·install_dra | |||
| 0003aff0:·6375·742d·6669·7073·207b·0a20·2070·6163··cut-fips·{.··pac | |||
| 0003b000:·6b61·6765·207b·2027·6472·6163·7574·2d66··kage·{·'dracut-f | |||
| 0003b010:·6970·7327·3a0a·2020·2020·656e·7375·7265··ips':.····ensure | |||
| 0003b020:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b030:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003afe0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003aff0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b000:·6472·6163·7574·2d66·6970·730a·2020·2020··dracut-fips.···· | |||
| 0003b010:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b020:·2077·6865·6e3a·0a20·202d·2028·2061·6e73···when:.··-·(·ans | |||
| 0003b030:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b040:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b050:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b060:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b070:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b080:·225d·0a20·2020·2061·6e64·206e·6f74·2028··"].····and·not·( | |||
| 0003b090:·206c·6f6f·6b75·7028·2265·6e76·222c·2022···lookup("env",·" | |||
| 0003b0a0:·636f·6e74·6169·6e65·7222·2920·3d3d·2022··container")·==·" | |||
| 0003b0b0:·6277·7261·702d·6f73·6275·696c·6422·2029··bwrap-osbuild"·) | |||
| 0003b0c0:·2029·0a20·202d·2061·6e73·6962·6c65·5f76···).··-·ansible_v | |||
| 0003b0d0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b0e0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b0f0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b100:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b110:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b120:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b130:·3130·2e31·2e32·0a20·202d·204e·4953·542d··10.1.2.··-·NIST- | |||
| 0003b140:·3830·302d·3137·312d·332e·3133·2e31·310a··800-171-3.13.11. | |||
| 0003b150:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003b160:·2d33·2e31·332e·380a·2020·2d20·4e49·5354··-3.13.8.··-·NIST | |||
| 0003b170:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b180:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b190:·4941·2d37·0a20·202d·204e·4953·542d·3830··IA-7.··-·NIST-80 | |||
| 0003b1a0:·302d·3533·2d53·432d·3132·0a20·202d·204e··0-53-SC-12.··-·N | |||
| 0003b1b0:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 0003b1c0:·2832·290a·2020·2d20·4e49·5354·2d38·3030··(2).··-·NIST-800 | |||
| 0003b1d0:·2d35·332d·5343·2d31·3228·3329·0a20·202d··-53-SC-12(3).··- | |||
| 0003b1e0:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003b1f0:·3133·0a20·202d·2065·6e61·626c·655f·7374··13.··-·enable_st | |||
| 0003b200:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b210:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b220:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b230:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b240:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b250:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b260:·655f·6472·6163·7574·2d66·6970·735f·696e··e_dracut-fips_in | |||
| 0003b270:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b | 0003b040:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b | 0003b050:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b | 0003b060:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b | 0003b070:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b | 0003b080:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b | 0003b090:·3631·3733·2220·7461·6269·6e64·6578·3d22··6173"·tabindex=" | ||
| 0003b | 0003b0a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b | 0003b0b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b | 0003b0c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b | 0003b0d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b | 0003b0e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b | 0003b0f0:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | ||
| 0003b | 0003b100:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003b | 0003b110:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b | 0003b120:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| Max diff block lines reached; 5871780/5903574 bytes (99.46%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and |
| 51 | ··············Organizations·(NIST·800-171) | 51 | ··············Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:7 | 54 | ····*·cpe:/o:oracle:linux:7 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 99, 60 lines modified | Offset 99, 26 lines modified | ||
| 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 111 | -·name:·Ensure·dracut-fips·is·installed | ||
| 112 | ··package: | ||
| 113 | ····name:·dracut-fips | ||
| 114 | ····state:·present | ||
| 115 | ··when: | ||
| 116 | ··-·(·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 117 | ····and·not·(·lookup("env",·"container")·==·"bwrap-osbuild"·)·) | ||
| 118 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 119 | ··tags: | ||
| 120 | ··-·CJIS-5.10.1.2 | ||
| 121 | ··-·NIST-800-171-3.13.11 | ||
| 122 | ··-·NIST-800-171-3.13.8 | ||
| 123 | ··-·NIST-800-53-CM-6(a) | ||
| 124 | ··-·NIST-800-53-IA-7 | ||
| 125 | ··-·NIST-800-53-SC-12 | ||
| 126 | ··-·NIST-800-53-SC-12(2) | ||
| 127 | ··-·NIST-800-53-SC-12(3) | ||
| 128 | ··-·NIST-800-53-SC-13 | ||
| 129 | ··-·enable_strategy | ||
| 130 | ··-·low_complexity | ||
| 131 | ··-·low_disruption | ||
| 132 | ··-·medium_severity | ||
| 133 | ··-·no_reboot_needed | ||
| 134 | ··-·package_dracut-fips_installed | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | include·install_dracut-fips | 111 | include·install_dracut-fips |
| 141 | class·install_dracut-fips·{ | 112 | class·install_dracut-fips·{ |
| 142 | ··package·{·'dracut-fips': | 113 | ··package·{·'dracut-fips': |
| 143 | ····ensure·=>·'installed', | 114 | ····ensure·=>·'installed', |
| 144 | ··} | 115 | ··} |
| 145 | } | 116 | } |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"dracut-fips" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | #·Remediation·is·applicable·only·in·certain·platforms | 122 | #·Remediation·is·applicable·only·in·certain·platforms |
| 156 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 123 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| Offset 160, 21 lines modified | Offset 126, 55 lines modified | ||
| 160 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | 126 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then |
| 161 | ····yum·install·-y·"dracut-fips" | 127 | ····yum·install·-y·"dracut-fips" |
| 162 | fi | 128 | fi |
| 163 | else | 129 | else |
| 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 130 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 165 | fi | 131 | fi |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"dracut-fips" | ||
| 135 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | package·--add=dracut-fips | 141 | package·--add=dracut-fips |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | -·name:·Ensure·dracut-fips·is·installed | ||
| 148 | ··package: | ||
| 149 | ····name:·dracut-fips | ||
| 150 | ····state:·present | ||
| 151 | ··when: | ||
| 152 | ··-·(·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 153 | ····and·not·(·lookup("env",·"container")·==·"bwrap-osbuild"·)·) | ||
| 154 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 155 | ··tags: | ||
| 156 | ··-·CJIS-5.10.1.2 | ||
| 157 | ··-·NIST-800-171-3.13.11 | ||
| 158 | ··-·NIST-800-171-3.13.8 | ||
| 159 | ··-·NIST-800-53-CM-6(a) | ||
| 160 | ··-·NIST-800-53-IA-7 | ||
| 161 | ··-·NIST-800-53-SC-12 | ||
| 162 | ··-·NIST-800-53-SC-12(2) | ||
| 163 | ··-·NIST-800-53-SC-12(3) | ||
| 164 | ··-·NIST-800-53-SC-13 | ||
| 165 | ··-·enable_strategy | ||
| 166 | ··-·low_complexity | ||
| 167 | ··-·low_disruption | ||
| 168 | ··-·medium_severity | ||
| 169 | ··-·no_reboot_needed | ||
| 170 | ··-·package_dracut-fips_installed | ||
| 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 173 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 172 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| Max diff block lines reached; 689249/694936 bytes (99.18%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037df0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | 00037df0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037e00:·2d30·3 | 00037e00:·2d30·3729·0a20·2020·2020·2020·2020·2020··-07).··········· | ||
| 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15153, 309 lines modified | Offset 15153, 309 lines modified | ||
| 0003b300:·6765·743d·2223·6964·6d35·3239·3922·2074··get="#idm5299"·t | 0003b300:·6765·743d·2223·6964·6d35·3239·3922·2074··get="#idm5299"·t | ||
| 0003b310:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b310:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b320:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b320:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b330:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b330:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b340:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b340:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b350:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b350:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b360:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b360:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b370:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b380:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b390:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b3a0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b3b0:·3d22·6964·6d35·3239·3922·3e3c·7072·653e··="idm5299"><pre> | |||
| 0003b3c0:·3c63·6f64·653e·0a23·2046·696e·6420·7768··<code>.#·Find·wh | |||
| 0003b3d0:·6963·6820·6669·6c65·7320·6861·7665·2069··ich·files·have·i | |||
| 0003b3e0:·6e63·6f72·7265·6374·2068·6173·6820·286e··ncorrect·hash·(n | |||
| 0003b3f0:·6f74·2069·6e20·2f65·7463·2c20·6265·6361··ot·in·/etc,·beca | |||
| 0003b400:·7573·6520·6f66·2074·6865·2073·7973·7465··use·of·the·syste | |||
| 0003b410:·6d20·7265·6c61·7465·6420·636f·6e66·6967··m·related·config | |||
| 0003b420:·2066·696c·6573·2920·616e·6420·7468·656e···files)·and·then | |||
| 0003b430:·2067·6574·2066·696c·6573·206e·616d·6573···get·files·names | |||
| 0003b440:·0a66·696c·6573·5f77·6974·685f·696e·636f··.files_with_inco | |||
| 0003b450:·7272·6563·745f·6861·7368·3d22·2428·7270··rrect_hash="$(rp | |||
| 0003b460:·6d20·2d56·6120·2d2d·6e6f·636f·6e66·6967··m·-Va·--noconfig | |||
| 0003b470:·207c·2067·7265·7020·2d45·2027·5e2e·2e35···|·grep·-E·'^..5 | |||
| 0003b480:·2720·7c20·6177·6b20·277b·7072·696e·7420··'·|·awk·'{print· | |||
| 0003b490:·244e·467d·2720·2922·0a0a·6966·205b·202d··$NF}'·)"..if·[·- | |||
| 0003b4a0:·6e20·2224·6669·6c65·735f·7769·7468·5f69··n·"$files_with_i | |||
| 0003b4b0:·6e63·6f72·7265·6374·5f68·6173·6822·205d··ncorrect_hash"·] | |||
| 0003b4c0:·3b20·7468·656e·0a20·2020·2023·2046·726f··;·then.····#·Fro | |||
| 0003b4d0:·6d20·6669·6c65·7320·6e61·6d65·7320·6765··m·files·names·ge | |||
| 0003b4e0:·7420·7061·636b·6167·6520·6e61·6d65·7320··t·package·names· | |||
| 0003b4f0:·616e·6420·6368·616e·6765·206e·6577·6c69··and·change·newli | |||
| 0003b500:·6e65·2074·6f20·7370·6163·652c·2062·6563··ne·to·space,·bec | |||
| 0003b510:·6175·7365·2072·706d·2077·7269·7465·7320··ause·rpm·writes· | |||
| 0003b520:·6561·6368·2070·6163·6b61·6765·2074·6f20··each·package·to· | |||
| 0003b530:·6e65·7720·6c69·6e65·0a20·2020·2070·6163··new·line.····pac | |||
| 0003b540:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003b550:·6c6c·3d22·2428·7270·6d20·2d71·6620·2466··ll="$(rpm·-qf·$f | |||
| 0003b560:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003b570:·6563·745f·6861·7368·207c·2074·7220·275c··ect_hash·|·tr·'\ | |||
| 0003b580:·6e27·2027·2027·2922·0a0a·2020·2020·0a20··n'·'·')"..····.· | |||
| 0003b590:·2020·2079·756d·2072·6569·6e73·7461·6c6c·····yum·reinstall | |||
| 0003b5a0:·202d·7920·2470·6163·6b61·6765·735f·746f···-y·$packages_to | |||
| 0003b5b0:·5f72·6569·6e73·7461·6c6c·0a20·2020·200a··_reinstall.····. | |||
| 0003b5c0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003b5d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b5e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b5f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b600:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b610:·6765·743d·2223·6964·6d35·3330·3022·2074··get="#idm5300"·t | |||
| 0003b620:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b630:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b640:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b650:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b660:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b670:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b | 0003b680:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003b | 0003b690:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003b6a0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003b6b0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003b6c0:·2069·643d·2269·646d·3533·3030·223e·3c74···id="idm5300"><t | ||
| 0003b | 0003b6d0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b | 0003b6e0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b | 0003b6f0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b | 0003b700:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b | 0003b710:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b | 0003b720:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003b | 0003b730:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b740:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b | 0003b750:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003b | 0003b760:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003b770:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b | 0003b780:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b | 0003b790:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b | 0003b7a0:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003b | 0003b7b0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003b | 0003b7c0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003b4c0:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | |||
| 0003b4d0:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | |||
| 0003b4e0:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | |||
| 0003b4f0:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | |||
| 0003b500:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | |||
| 0003b510:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | |||
| 0003b520:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | |||
| 0003b530:·790a·2020·7768·656e·3a20·616e·7369·626c··y.··when:·ansibl | |||
| 0003b540:·655f·6469·7374·7269·6275·7469·6f6e·2069··e_distribution·i | |||
| 0003b550:·6e20·5b20·2246·6564·6f72·6122·2c20·2252··n·[·"Fedora",·"R | |||
| 0003b560:·6564·4861·7422·2c20·2243·656e·744f·5322··edHat",·"CentOS" | |||
| 0003b570:·2c20·224f·7261·636c·654c·696e·7578·2220··,·"OracleLinux"· | |||
| 0003b580:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b590:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | |||
| 0003b5a0:·4449·5341·2d53·5449·472d·4f4c·3037·2d30··DISA-STIG-OL07-0 | |||
| 0003b5b0:·302d·3031·3030·3230·0a20·202d·204e·4953··0-010020.··-·NIS | |||
| 0003b5c0:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | |||
| 0003b5d0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003b5e0:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | |||
| 0003b5f0:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | |||
| 0003b600:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b610:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | |||
| 0003b620:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | |||
| 0003b630:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b640:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | |||
| 0003b650:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | |||
| 0003b660:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | |||
| 0003b670:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | |||
| 0003b680:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b690:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b6a0:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | |||
| 0003b6b0:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | |||
| 0003b6c0:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | |||
| 0003b6d0:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | |||
| Max diff block lines reached; 6021416/6040514 bytes (99.68%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:oracle:linux:7 | 45 | ····*·cpe:/o:oracle:linux:7 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 104, 14 lines modified | Offset 104, 27 lines modified | ||
| 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 108 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 108 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 112 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 113 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 114 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 115 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 116 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 117 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 118 | fi | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 116 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 124 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 117 | ··set_fact: | 125 | ··set_fact: |
| Offset 243, 27 lines modified | Offset 256, 14 lines modified | ||
| 243 | ··-·PCI-DSSv4-11.5.2 | 256 | ··-·PCI-DSSv4-11.5.2 |
| 244 | ··-·high_complexity | 257 | ··-·high_complexity |
| 245 | ··-·high_severity | 258 | ··-·high_severity |
| 246 | ··-·medium_disruption | 259 | ··-·medium_disruption |
| 247 | ··-·no_reboot_needed | 260 | ··-·no_reboot_needed |
| 248 | ··-·restrict_strategy | 261 | ··-·restrict_strategy |
| 249 | ··-·rpm_verify_hashes | 262 | ··-·rpm_verify_hashes |
| 250 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 251 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 252 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 253 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 254 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 255 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 256 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 257 | fi | ||
| 258 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 263 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 259 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 264 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 260 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 265 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 261 | run·the·following·command·to·determine·which·package·owns·it: | 266 | run·the·following·command·to·determine·which·package·owns·it: |
| 262 | $·rpm·-qf·FILENAME | 267 | $·rpm·-qf·FILENAME |
| 263 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 268 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 264 | $·sudo·rpm·--setugids·PACKAGENAME | 269 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 284, 14 lines modified | Offset 284, 40 lines modified | ||
| 284 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 284 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 285 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 285 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 286 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 286 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 287 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 287 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 288 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 288 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 289 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 289 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 290 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 290 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 293 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 294 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 295 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 296 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 297 | declare·-A·SETPERMS_RPM_DICT | ||
| 298 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 299 | #·is·expected·by·the·RPM·database | ||
| 300 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 301 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 302 | do | ||
| 303 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 304 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 305 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 306 | done | ||
| 307 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 308 | #·correct·values | ||
| 309 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 310 | do | ||
| 311 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 312 | done | ||
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 292 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 293 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 294 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 295 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 296 | -·name:·Read·list·of·files·with·incorrect·ownership | 318 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 297 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 319 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 369, 40 lines modified | Offset 395, 14 lines modified | ||
| 369 | ··-·PCI-DSSv4-11.5.2 | 395 | ··-·PCI-DSSv4-11.5.2 |
| 370 | ··-·high_complexity | 396 | ··-·high_complexity |
| 371 | ··-·high_severity | 397 | ··-·high_severity |
| 372 | ··-·medium_disruption | 398 | ··-·medium_disruption |
| 373 | ··-·no_reboot_needed | 399 | ··-·no_reboot_needed |
| 374 | ··-·restrict_strategy | 400 | ··-·restrict_strategy |
| 375 | ··-·rpm_verify_ownership | 401 | ··-·rpm_verify_ownership |
| 376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 377 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 378 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 379 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 380 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 381 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 646490/653869 bytes (98.87%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·3234·2d31·312d·303 | 00037f20:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15184, 310 lines modified | Offset 15184, 310 lines modified | ||
| 0003b4f0:·7461·7267·6574·3d22·2369·646d·3532·3939··target="#idm5299 | 0003b4f0:·7461·7267·6574·3d22·2369·646d·3532·3939··target="#idm5299 | ||
| 0003b500:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b500:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b510:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b510:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b520:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b520:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b530:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b530:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b540:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b540:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b550:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b550:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b560:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b570:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b580:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b590:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b5a0:·2069·643d·2269·646d·3532·3939·223e·3c70···id="idm5299"><p | |||
| 0003b5b0:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003b5c0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003b5d0:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003b5e0:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003b5f0:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003b600:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003b610:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003b620:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003b630:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003b640:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003b650:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003b660:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003b670:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003b680:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003b690:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003b6a0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003b6b0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003b6c0:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003b6d0:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003b6e0:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003b6f0:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003b700:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003b710:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003b720:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003b730:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003b740:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003b750:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003b760:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003b770:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003b780:·200a·2020·2020·7975·6d20·7265·696e·7374···.····yum·reinst | |||
| 0003b790:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003b7a0:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003b7b0:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003b7c0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b7d0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b7e0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b7f0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b800:·7461·7267·6574·3d22·2369·646d·3533·3030··target="#idm5300 | |||
| 0003b810:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b820:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b830:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b840:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b850:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b860:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b | 0003b870:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003b | 0003b880:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b | 0003b890:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003b8a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003b8b0:·7365·2220·6964·3d22·6964·6d35·3330·3022··se"·id="idm5300" | ||
| 0003b | 0003b8c0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003b8d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003b8e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003b8f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003b900:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003b910:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003b | 0003b920:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003b | 0003b930:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b | 0003b940:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003b | 0003b950:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b960:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003b970:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003b980:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003b990:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003b | 0003b9a0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003b | 0003b9b0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003b6b0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | |||
| 0003b6c0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | |||
| 0003b6d0:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | |||
| 0003b6e0:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | |||
| 0003b6f0:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | |||
| 0003b700:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | |||
| 0003b710:·6d64·3a20·7975·6d20·7265·696e·7374·616c··md:·yum·reinstal | |||
| 0003b720:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | |||
| 0003b730:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | |||
| 0003b740:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | |||
| 0003b750:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | |||
| 0003b760:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | |||
| 0003b770:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | |||
| 0003b780:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | |||
| 0003b790:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | |||
| 0003b7a0:·372d·3030·2d30·3130·3032·300a·2020·2d20··7-00-010020.··-· | |||
| 0003b7b0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | |||
| 0003b7c0:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | |||
| 0003b7d0:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | |||
| 0003b7e0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | |||
| 0003b7f0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b800:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | |||
| 0003b810:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | |||
| 0003b820:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b830:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | |||
| 0003b840:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | |||
| 0003b850:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b860:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | |||
| 0003b870:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b880:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b890:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | |||
| 0003b8a0:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | |||
| 0003b8b0:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | |||
| 0003b8c0:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | |||
| Max diff block lines reached; 15996865/16015963 bytes (99.88%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:7 | 50 | ····*·cpe:/o:oracle:linux:7 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 111, 14 lines modified | Offset 111, 27 lines modified | ||
| 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 131 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 124 | ··set_fact: | 132 | ··set_fact: |
| Offset 250, 27 lines modified | Offset 263, 14 lines modified | ||
| 250 | ··-·PCI-DSSv4-11.5.2 | 263 | ··-·PCI-DSSv4-11.5.2 |
| 251 | ··-·high_complexity | 264 | ··-·high_complexity |
| 252 | ··-·high_severity | 265 | ··-·high_severity |
| 253 | ··-·medium_disruption | 266 | ··-·medium_disruption |
| 254 | ··-·no_reboot_needed | 267 | ··-·no_reboot_needed |
| 255 | ··-·restrict_strategy | 268 | ··-·restrict_strategy |
| 256 | ··-·rpm_verify_hashes | 269 | ··-·rpm_verify_hashes |
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 258 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 259 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 260 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 261 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 262 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 263 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 264 | fi | ||
| 265 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 266 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 271 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 267 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 272 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 268 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 273 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 269 | $·rpm·-qf·FILENAME | 274 | $·rpm·-qf·FILENAME |
| 270 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 293, 14 lines modified | Offset 293, 44 lines modified | ||
| 293 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 293 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 294 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 294 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 296 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 296 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 297 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 297 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 298 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 298 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 299 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 299 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 301 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 302 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 303 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 304 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 305 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 306 | declare·-A·SETPERMS_RPM_DICT | ||
| 307 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 308 | #·is·expected·by·the·RPM·database | ||
| 309 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 310 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 311 | do | ||
| 312 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 313 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 314 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 315 | ········do | ||
| 316 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 317 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 318 | ········done | ||
| 319 | done | ||
| 320 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 321 | #·correct·values | ||
| 322 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 323 | do | ||
| 324 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 325 | done | ||
| 300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 301 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 302 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 303 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 304 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 305 | -·name:·Read·list·of·files·with·incorrect·permissions | 331 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 306 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 332 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 381, 44 lines modified | Offset 411, 14 lines modified | ||
| 381 | ··-·PCI-DSSv4-11.5.2 | 411 | ··-·PCI-DSSv4-11.5.2 |
| 382 | ··-·high_complexity | 412 | ··-·high_complexity |
| 383 | ··-·high_severity | 413 | ··-·high_severity |
| 384 | ··-·medium_disruption | 414 | ··-·medium_disruption |
| 385 | ··-·no_reboot_needed | 415 | ··-·no_reboot_needed |
| 386 | ··-·restrict_strategy | 416 | ··-·restrict_strategy |
| 387 | ··-·rpm_verify_permissions | 417 | ··-·rpm_verify_permissions |
| 388 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 389 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 390 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1234250/1241999 bytes (99.38%) of diff not shown. | |||
| Offset 14368, 15 lines modified | Offset 14368, 15 lines modified | ||
| 000381f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000381f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038200:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038200:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038210:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038210:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038220:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038220:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038230:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038230:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038240:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038240:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038250:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038250:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038260:·206f·6620·3230·3234·2d31·312d·303 | 00038260:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00038270:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038270:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038280:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038280:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038290:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038290:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000382a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000382a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000382b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000382b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000382c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000382c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000382d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000382d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15258, 310 lines modified | Offset 15258, 310 lines modified | ||
| 0003b990:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003b990:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b9a0:·3239·3922·2074·6162·696e·6465·783d·2230··299"·tabindex="0 | 0003b9a0:·3239·3922·2074·6162·696e·6465·783d·2230··299"·tabindex="0 | ||
| 0003b9b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b9b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b9c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b9c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b9d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b9d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b9e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b9e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b9f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b9f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003ba00:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003ba10:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003ba20:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ba30:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ba40:·7365·2220·6964·3d22·6964·6d35·3239·3922··se"·id="idm5299" | |||
| 0003ba50:·3e3c·7072·653e·3c63·6f64·653e·0a23·2046··><pre><code>.#·F | |||
| 0003ba60:·696e·6420·7768·6963·6820·6669·6c65·7320··ind·which·files· | |||
| 0003ba70:·6861·7665·2069·6e63·6f72·7265·6374·2068··have·incorrect·h | |||
| 0003ba80:·6173·6820·286e·6f74·2069·6e20·2f65·7463··ash·(not·in·/etc | |||
| 0003ba90:·2c20·6265·6361·7573·6520·6f66·2074·6865··,·because·of·the | |||
| 0003baa0:·2073·7973·7465·6d20·7265·6c61·7465·6420···system·related· | |||
| 0003bab0:·636f·6e66·6967·2066·696c·6573·2920·616e··config·files)·an | |||
| 0003bac0:·6420·7468·656e·2067·6574·2066·696c·6573··d·then·get·files | |||
| 0003bad0:·206e·616d·6573·0a66·696c·6573·5f77·6974···names.files_wit | |||
| 0003bae0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003baf0:·3d22·2428·7270·6d20·2d56·6120·2d2d·6e6f··="$(rpm·-Va·--no | |||
| 0003bb00:·636f·6e66·6967·207c·2067·7265·7020·2d45··config·|·grep·-E | |||
| 0003bb10:·2027·5e2e·2e35·2720·7c20·6177·6b20·277b···'^..5'·|·awk·'{ | |||
| 0003bb20:·7072·696e·7420·244e·467d·2720·2922·0a0a··print·$NF}'·)".. | |||
| 0003bb30:·6966·205b·202d·6e20·2224·6669·6c65·735f··if·[·-n·"$files_ | |||
| 0003bb40:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003bb50:·6173·6822·205d·3b20·7468·656e·0a20·2020··ash"·];·then.··· | |||
| 0003bb60:·2023·2046·726f·6d20·6669·6c65·7320·6e61···#·From·files·na | |||
| 0003bb70:·6d65·7320·6765·7420·7061·636b·6167·6520··mes·get·package· | |||
| 0003bb80:·6e61·6d65·7320·616e·6420·6368·616e·6765··names·and·change | |||
| 0003bb90:·206e·6577·6c69·6e65·2074·6f20·7370·6163···newline·to·spac | |||
| 0003bba0:·652c·2062·6563·6175·7365·2072·706d·2077··e,·because·rpm·w | |||
| 0003bbb0:·7269·7465·7320·6561·6368·2070·6163·6b61··rites·each·packa | |||
| 0003bbc0:·6765·2074·6f20·6e65·7720·6c69·6e65·0a20··ge·to·new·line.· | |||
| 0003bbd0:·2020·2070·6163·6b61·6765·735f·746f·5f72·····packages_to_r | |||
| 0003bbe0:·6569·6e73·7461·6c6c·3d22·2428·7270·6d20··einstall="$(rpm· | |||
| 0003bbf0:·2d71·6620·2466·696c·6573·5f77·6974·685f··-qf·$files_with_ | |||
| 0003bc00:·696e·636f·7272·6563·745f·6861·7368·207c··incorrect_hash·| | |||
| 0003bc10:·2074·7220·275c·6e27·2027·2027·2922·0a0a···tr·'\n'·'·')".. | |||
| 0003bc20:·2020·2020·0a20·2020·2079·756d·2072·6569······.····yum·rei | |||
| 0003bc30:·6e73·7461·6c6c·202d·7920·2470·6163·6b61··nstall·-y·$packa | |||
| 0003bc40:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | |||
| 0003bc50:·0a20·2020·200a·6669·0a3c·2f63·6f64·653e··.····.fi.</code> | |||
| 0003bc60:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bc70:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bc80:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bc90:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bca0:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003bcb0:·3330·3022·2074·6162·696e·6465·783d·2230··300"·tabindex="0 | |||
| 0003bcc0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003bcd0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bce0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bcf0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bd00:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b | 0003bd10:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003b | 0003bd20:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b | 0003bd30:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b | 0003bd40:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b | 0003bd50:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | ||
| 0003b | 0003bd60:·3030·223e·3c74·6162·6c65·2063·6c61·7373··00"><table·class | ||
| 0003b | 0003bd70:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b | 0003bd80:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b | 0003bd90:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b | 0003bda0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b | 0003bdb0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b | 0003bdc0:·643e·6869·6768·3c2f·7464·3e3c·2f74·723e··d>high</td></tr> | ||
| 0003b | 0003bdd0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b | 0003bde0:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0003b | 0003bdf0:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003b | 0003be00:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b | 0003be10:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b | 0003be20:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b | 0003be30:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003b | 0003be40:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003b | 0003be50:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b | 0003be60:·653e·2d20·6e61·6d65·3a20·2753·6574·2066··e>-·name:·'Set·f | ||
| 0003b | 0003be70:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | ||
| 0003b | 0003be80:·6167·6572·2072·6569·6e73·7461·6c6c·2063··ager·reinstall·c | ||
| 0003b | 0003be90:·6f6d·6d61·6e64·270a·2020·7365·745f·6661··ommand'.··set_fa | ||
| 0003b | 0003bea0:·6374·3a0a·2020·2020·7061·636b·6167·655f··ct:.····package_ | ||
| 0003b | 0003beb0:·6d61·6e61·6765·725f·7265·696e·7374·616c··manager_reinstal | ||
| 0003b | 0003bec0:·6c5f·636d·643a·2079·756d·2072·6569·6e73··l_cmd:·yum·reins | ||
| 0003b | 0003bed0:·7461·6c6c·202d·790a·2020·7768·656e·3a20··tall·-y.··when:· | ||
| 0003b | 0003bee0:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | ||
| 0003b | 0003bef0:·7469·6f6e·2069·6e20·5b20·2246·6564·6f72··tion·in·[·"Fedor | ||
| 0003b | 0003bf00:·6122·2c20·2252·6564·4861·7422·2c20·2243··a",·"RedHat",·"C | ||
| 0003b | 0003bf10:·656e·744f·5322·2c20·224f·7261·636c·654c··entOS",·"OracleL | ||
| 0003b | 0003bf20:·696e·7578·2220·5d0a·2020·7461·6773·3a0a··inux"·].··tags:. | ||
| 0003b | 0003bf30:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003b | 0003bf40:·310a·2020·2d20·4449·5341·2d53·5449·472d··1.··-·DISA-STIG- | ||
| 0003b | 0003bf50:·4f4c·3037·2d30·302d·3031·3030·3230·0a20··OL07-00-010020.· | ||
| 0003b | 0003bf60:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003bf70:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003b | 0003bf80:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003b | 0003bf90:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003b | 0003bfa0:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003b | 0003bfb0:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003b | 0003bfc0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b | 0003bfd0:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003b | 0003bfe0:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003b | 0003bff0:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003 | 0003c000:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003 | 0003c010:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003 | 0003c020:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003 | 0003c030:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003 | 0003c040:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003 | 0003c050:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003 | 0003c060:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003 | 0003c070:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| Max diff block lines reached; 26334203/26376761 bytes (99.84%) of diff not shown. | |||
| Offset 14305, 15 lines modified | Offset 14305, 15 lines modified | ||
| 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e70:·3234·2d31·312d·303 | 00037e70:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15048, 232 lines modified | Offset 15048, 232 lines modified | ||
| 0003ac70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ac70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ac80:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | 0003ac80:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | ||
| 0003ac90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ac90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003aca0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003aca0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003acb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003acb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003acc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003acc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003acd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003acd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ace0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ace0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | ||
| 0003acf0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003ad00:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ad10:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ad20:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ad30:·2269·646d·3631·3732·223e·3c74·6162·6c65··"idm6172"><table | |||
| 0003ad40:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003acf0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ad00:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ad10:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ad20:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ad30:·3d22·6964·6d36·3137·3222·3e3c·7461·626c··="idm6172"><tabl | |||
| 0003ad40:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ad50:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ad | 0003ad50:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003ad70:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ad80:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ad90:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ada0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ad | 0003ad60:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003ad70:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ad80:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ad90:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ada0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003adb0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003adc0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003add0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ade0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003adf0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003ae00:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003a | 0003ae10:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003ae20:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003ae30:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003add0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ade0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003adf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ae00:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ae10:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003ae20:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ae30:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003ae40:·6 | 0003ae40:·6c5f·6472·6163·7574·2d66·6970·730a·0a63··l_dracut-fips..c | ||
| 0003ae50:·6c61·7373·2069·6e73·7461·6c6c·5f64·7261··lass·install_dra | |||
| 0003ae60:·6375·742d·6669·7073·207b·0a20·2070·6163··cut-fips·{.··pac | |||
| 0003ae70:·6b61·6765·207b·2027·6472·6163·7574·2d66··kage·{·'dracut-f | |||
| 0003ae80:·6970·7327·3a0a·2020·2020·656e·7375·7265··ips':.····ensure | |||
| 0003ae90:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003aea0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003ae50:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003ae60:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003ae70:·6472·6163·7574·2d66·6970·730a·2020·2020··dracut-fips.···· | |||
| 0003ae80:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003ae90:·2077·6865·6e3a·0a20·202d·2028·2061·6e73···when:.··-·(·ans | |||
| 0003aea0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003aeb0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003aec0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003aed0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003aee0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003aef0:·225d·0a20·2020·2061·6e64·206e·6f74·2028··"].····and·not·( | |||
| 0003af00:·206c·6f6f·6b75·7028·2265·6e76·222c·2022···lookup("env",·" | |||
| 0003af10:·636f·6e74·6169·6e65·7222·2920·3d3d·2022··container")·==·" | |||
| 0003af20:·6277·7261·702d·6f73·6275·696c·6422·2029··bwrap-osbuild"·) | |||
| 0003af30:·2029·0a20·202d·2061·6e73·6962·6c65·5f76···).··-·ansible_v | |||
| 0003af40:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003af50:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003af60:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003af70:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003af80:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003af90:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003afa0:·3130·2e31·2e32·0a20·202d·204e·4953·542d··10.1.2.··-·NIST- | |||
| 0003afb0:·3830·302d·3137·312d·332e·3133·2e31·310a··800-171-3.13.11. | |||
| 0003afc0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003afd0:·2d33·2e31·332e·380a·2020·2d20·4e49·5354··-3.13.8.··-·NIST | |||
| 0003afe0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003aff0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b000:·4941·2d37·0a20·202d·204e·4953·542d·3830··IA-7.··-·NIST-80 | |||
| 0003b010:·302d·3533·2d53·432d·3132·0a20·202d·204e··0-53-SC-12.··-·N | |||
| 0003b020:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 0003b030:·2832·290a·2020·2d20·4e49·5354·2d38·3030··(2).··-·NIST-800 | |||
| 0003b040:·2d35·332d·5343·2d31·3228·3329·0a20·202d··-53-SC-12(3).··- | |||
| 0003b050:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003b060:·3133·0a20·202d·2065·6e61·626c·655f·7374··13.··-·enable_st | |||
| 0003b070:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b080:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b090:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b0a0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b0b0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b0c0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b0d0:·655f·6472·6163·7574·2d66·6970·735f·696e··e_dracut-fips_in | |||
| 0003b0e0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b0 | 0003aeb0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003 | 0003aec0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003 | 0003aed0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003 | 0003aee0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003 | 0003aef0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003 | 0003af00:·3631·3733·2220·7461·6269·6e64·6578·3d22··6173"·tabindex=" | ||
| 0003 | 0003af10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003 | 0003af20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003 | 0003af30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003 | 0003af40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003 | 0003af50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003 | 0003af60:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | ||
| 0003 | 0003af70:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003 | 0003af80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003 | 0003af90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| Max diff block lines reached; 5871780/5903574 bytes (99.46%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 92, 60 lines modified | Offset 92, 26 lines modified | ||
| 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 104 | -·name:·Ensure·dracut-fips·is·installed | ||
| 105 | ··package: | ||
| 106 | ····name:·dracut-fips | ||
| 107 | ····state:·present | ||
| 108 | ··when: | ||
| 109 | ··-·(·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 110 | ····and·not·(·lookup("env",·"container")·==·"bwrap-osbuild"·)·) | ||
| 111 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 112 | ··tags: | ||
| 113 | ··-·CJIS-5.10.1.2 | ||
| 114 | ··-·NIST-800-171-3.13.11 | ||
| 115 | ··-·NIST-800-171-3.13.8 | ||
| 116 | ··-·NIST-800-53-CM-6(a) | ||
| 117 | ··-·NIST-800-53-IA-7 | ||
| 118 | ··-·NIST-800-53-SC-12 | ||
| 119 | ··-·NIST-800-53-SC-12(2) | ||
| 120 | ··-·NIST-800-53-SC-12(3) | ||
| 121 | ··-·NIST-800-53-SC-13 | ||
| 122 | ··-·enable_strategy | ||
| 123 | ··-·low_complexity | ||
| 124 | ··-·low_disruption | ||
| 125 | ··-·medium_severity | ||
| 126 | ··-·no_reboot_needed | ||
| 127 | ··-·package_dracut-fips_installed | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | include·install_dracut-fips | 104 | include·install_dracut-fips |
| 134 | class·install_dracut-fips·{ | 105 | class·install_dracut-fips·{ |
| 135 | ··package·{·'dracut-fips': | 106 | ··package·{·'dracut-fips': |
| 136 | ····ensure·=>·'installed', | 107 | ····ensure·=>·'installed', |
| 137 | ··} | 108 | ··} |
| 138 | } | 109 | } |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | [[packages]] | ||
| 141 | name·=·"dracut-fips" | ||
| 142 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | 115 | #·Remediation·is·applicable·only·in·certain·platforms |
| 149 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 116 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| Offset 153, 21 lines modified | Offset 119, 55 lines modified | ||
| 153 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | 119 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then |
| 154 | ····yum·install·-y·"dracut-fips" | 120 | ····yum·install·-y·"dracut-fips" |
| 155 | fi | 121 | fi |
| 156 | else | 122 | else |
| 157 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 123 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 158 | fi | 124 | fi |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"dracut-fips" | ||
| 128 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | package·--add=dracut-fips | 134 | package·--add=dracut-fips |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | -·name:·Ensure·dracut-fips·is·installed | ||
| 141 | ··package: | ||
| 142 | ····name:·dracut-fips | ||
| 143 | ····state:·present | ||
| 144 | ··when: | ||
| 145 | ··-·(·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 146 | ····and·not·(·lookup("env",·"container")·==·"bwrap-osbuild"·)·) | ||
| 147 | ··-·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 148 | ··tags: | ||
| 149 | ··-·CJIS-5.10.1.2 | ||
| 150 | ··-·NIST-800-171-3.13.11 | ||
| 151 | ··-·NIST-800-171-3.13.8 | ||
| 152 | ··-·NIST-800-53-CM-6(a) | ||
| 153 | ··-·NIST-800-53-IA-7 | ||
| 154 | ··-·NIST-800-53-SC-12 | ||
| 155 | ··-·NIST-800-53-SC-12(2) | ||
| 156 | ··-·NIST-800-53-SC-12(3) | ||
| 157 | ··-·NIST-800-53-SC-13 | ||
| 158 | ··-·enable_strategy | ||
| 159 | ··-·low_complexity | ||
| 160 | ··-·low_disruption | ||
| 161 | ··-·medium_severity | ||
| 162 | ··-·no_reboot_needed | ||
| 163 | ··-·package_dracut-fips_installed | ||
| 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 164 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 166 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 165 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| Max diff block lines reached; 689249/694983 bytes (99.17%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037c80:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037c90:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037c90:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ca0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ca0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cb0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cb0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037cc0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037cc0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037cd0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037cd0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037ce0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037ce0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037cf0:·3230·3234·2d31·312d·303 | 00037cf0:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00037d00:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d00:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d10:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d10:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d20:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d20:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d30:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d30:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d40:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d40:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d50:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d50:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037d60:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037d60:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15123, 310 lines modified | Offset 15123, 310 lines modified | ||
| 0003b120:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b120:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b130:·2369·646d·3532·3939·2220·7461·6269·6e64··#idm5299"·tabind | 0003b130:·2369·646d·3532·3939·2220·7461·6269·6e64··#idm5299"·tabind | ||
| 0003b140:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b140:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b150:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b150:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b160:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b160:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b170:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b170:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b180:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b180:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b190:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b1a0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b1b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b1c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b1d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b1e0:·3532·3939·223e·3c70·7265·3e3c·636f·6465··5299"><pre><code | |||
| 0003b1f0:·3e0a·2320·4669·6e64·2077·6869·6368·2066··>.#·Find·which·f | |||
| 0003b200:·696c·6573·2068·6176·6520·696e·636f·7272··iles·have·incorr | |||
| 0003b210:·6563·7420·6861·7368·2028·6e6f·7420·696e··ect·hash·(not·in | |||
| 0003b220:·202f·6574·632c·2062·6563·6175·7365·206f···/etc,·because·o | |||
| 0003b230:·6620·7468·6520·7379·7374·656d·2072·656c··f·the·system·rel | |||
| 0003b240:·6174·6564·2063·6f6e·6669·6720·6669·6c65··ated·config·file | |||
| 0003b250:·7329·2061·6e64·2074·6865·6e20·6765·7420··s)·and·then·get· | |||
| 0003b260:·6669·6c65·7320·6e61·6d65·730a·6669·6c65··files·names.file | |||
| 0003b270:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003b280:·5f68·6173·683d·2224·2872·706d·202d·5661··_hash="$(rpm·-Va | |||
| 0003b290:·202d·2d6e·6f63·6f6e·6669·6720·7c20·6772···--noconfig·|·gr | |||
| 0003b2a0:·6570·202d·4520·275e·2e2e·3527·207c·2061··ep·-E·'^..5'·|·a | |||
| 0003b2b0:·776b·2027·7b70·7269·6e74·2024·4e46·7d27··wk·'{print·$NF}' | |||
| 0003b2c0:·2029·220a·0a69·6620·5b20·2d6e·2022·2466···)"..if·[·-n·"$f | |||
| 0003b2d0:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003b2e0:·6563·745f·6861·7368·2220·5d3b·2074·6865··ect_hash"·];·the | |||
| 0003b2f0:·6e0a·2020·2020·2320·4672·6f6d·2066·696c··n.····#·From·fil | |||
| 0003b300:·6573·206e·616d·6573·2067·6574·2070·6163··es·names·get·pac | |||
| 0003b310:·6b61·6765·206e·616d·6573·2061·6e64·2063··kage·names·and·c | |||
| 0003b320:·6861·6e67·6520·6e65·776c·696e·6520·746f··hange·newline·to | |||
| 0003b330:·2073·7061·6365·2c20·6265·6361·7573·6520···space,·because· | |||
| 0003b340:·7270·6d20·7772·6974·6573·2065·6163·6820··rpm·writes·each· | |||
| 0003b350:·7061·636b·6167·6520·746f·206e·6577·206c··package·to·new·l | |||
| 0003b360:·696e·650a·2020·2020·7061·636b·6167·6573··ine.····packages | |||
| 0003b370:·5f74·6f5f·7265·696e·7374·616c·6c3d·2224··_to_reinstall="$ | |||
| 0003b380:·2872·706d·202d·7166·2024·6669·6c65·735f··(rpm·-qf·$files_ | |||
| 0003b390:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003b3a0:·6173·6820·7c20·7472·2027·5c6e·2720·2720··ash·|·tr·'\n'·'· | |||
| 0003b3b0:·2729·220a·0a20·2020·200a·2020·2020·7975··')"..····.····yu | |||
| 0003b3c0:·6d20·7265·696e·7374·616c·6c20·2d79·2024··m·reinstall·-y·$ | |||
| 0003b3d0:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003b3e0:·7374·616c·6c0a·2020·2020·0a66·690a·3c2f··stall.····.fi.</ | |||
| 0003b3f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b400:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b410:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b420:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b430:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b440:·2369·646d·3533·3030·2220·7461·6269·6e64··#idm5300"·tabind | |||
| 0003b450:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b460:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b470:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b480:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b490:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b | 0003b4a0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003b | 0003b4b0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003b | 0003b4c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b | 0003b4d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b | 0003b4e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b | 0003b4f0:·6964·6d35·3330·3022·3e3c·7461·626c·6520··idm5300"><table· | ||
| 0003b | 0003b500:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b | 0003b510:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b | 0003b520:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b | 0003b530:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b | 0003b540:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b | 0003b550:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | ||
| 0003b | 0003b560:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b | 0003b570:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003b580:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003b | 0003b590:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b | 0003b5a0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b | 0003b5b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b5c0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b | 0003b5d0:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003b | 0003b5e0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b | 0003b5f0:·3e3c·636f·6465·3e2d·206e·616d·653a·2027··><code>-·name:·' | ||
| 0003b | 0003b600:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| 0003b300:·6520·6d61·6e61·6765·7220·7265·696e·7374··e·manager·reinst | |||
| 0003b310:·616c·6c20·636f·6d6d·616e·6427·0a20·2073··all·command'.··s | |||
| 0003b320:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | |||
| 0003b330:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | |||
| 0003b340:·6e73·7461·6c6c·5f63·6d64·3a20·7975·6d20··nstall_cmd:·yum· | |||
| 0003b350:·7265·696e·7374·616c·6c20·2d79·0a20·2077··reinstall·-y.··w | |||
| 0003b360:·6865·6e3a·2061·6e73·6962·6c65·5f64·6973··hen:·ansible_dis | |||
| 0003b370:·7472·6962·7574·696f·6e20·696e·205b·2022··tribution·in·[·" | |||
| 0003b380:·4665·646f·7261·222c·2022·5265·6448·6174··Fedora",·"RedHat | |||
| 0003b390:·222c·2022·4365·6e74·4f53·222c·2022·4f72··",·"CentOS",·"Or | |||
| 0003b3a0:·6163·6c65·4c69·6e75·7822·205d·0a20·2074··acleLinux"·].··t | |||
| 0003b3b0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b3c0:·3130·2e34·2e31·0a20·202d·2044·4953·412d··10.4.1.··-·DISA- | |||
| 0003b3d0:·5354·4947·2d4f·4c30·372d·3030·2d30·3130··STIG-OL07-00-010 | |||
| 0003b3e0:·3032·300a·2020·2d20·4e49·5354·2d38·3030··020.··-·NIST-800 | |||
| 0003b3f0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | |||
| 0003b400:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | |||
| 0003b410:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | |||
| 0003b420:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | |||
| 0003b430:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | |||
| 0003b440:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b450:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | |||
| 0003b460:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | |||
| 0003b470:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b480:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | |||
| 0003b490:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | |||
| 0003b4a0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b4b0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b4c0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | |||
| 0003b4d0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | |||
| 0003b4e0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | |||
| 0003b4f0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | |||
| Max diff block lines reached; 9482134/9501094 bytes (99.80%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·Draft·for·Oracle·Linux·7 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·Draft·for·Oracle·Linux·7 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:7 | 41 | ····*·cpe:/o:oracle:linux:7 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 97, 14 lines modified | Offset 97, 27 lines modified | ||
| 97 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 97 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 98 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 98 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 100 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 100 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 106 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 107 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 108 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 109 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 110 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 111 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 117 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 110 | ··set_fact: | 118 | ··set_fact: |
| Offset 236, 27 lines modified | Offset 249, 14 lines modified | ||
| 236 | ··-·PCI-DSSv4-11.5.2 | 249 | ··-·PCI-DSSv4-11.5.2 |
| 237 | ··-·high_complexity | 250 | ··-·high_complexity |
| 238 | ··-·high_severity | 251 | ··-·high_severity |
| 239 | ··-·medium_disruption | 252 | ··-·medium_disruption |
| 240 | ··-·no_reboot_needed | 253 | ··-·no_reboot_needed |
| 241 | ··-·restrict_strategy | 254 | ··-·restrict_strategy |
| 242 | ··-·rpm_verify_hashes | 255 | ··-·rpm_verify_hashes |
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 244 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 245 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 246 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 247 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 248 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 249 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 250 | fi | ||
| 251 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 256 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 252 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 257 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 253 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 258 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 254 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 259 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 255 | $·rpm·-qf·FILENAME | 260 | $·rpm·-qf·FILENAME |
| 256 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 261 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 279, 14 lines modified | Offset 279, 44 lines modified | ||
| 279 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 279 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 280 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 280 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 281 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 281 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 282 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 282 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 283 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 283 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 284 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 284 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 285 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 285 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 287 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 288 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 289 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 290 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 291 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 292 | declare·-A·SETPERMS_RPM_DICT | ||
| 293 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 294 | #·is·expected·by·the·RPM·database | ||
| 295 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 296 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 297 | do | ||
| 298 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 299 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 300 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 301 | ········do | ||
| 302 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 303 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 304 | ········done | ||
| 305 | done | ||
| 306 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 307 | #·correct·values | ||
| 308 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 309 | do | ||
| 310 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 311 | done | ||
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 287 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 288 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 289 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 290 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 291 | -·name:·Read·list·of·files·with·incorrect·permissions | 317 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 292 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 318 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 367, 44 lines modified | Offset 397, 14 lines modified | ||
| 367 | ··-·PCI-DSSv4-11.5.2 | 397 | ··-·PCI-DSSv4-11.5.2 |
| 368 | ··-·high_complexity | 398 | ··-·high_complexity |
| 369 | ··-·high_severity | 399 | ··-·high_severity |
| 370 | ··-·medium_disruption | 400 | ··-·medium_disruption |
| 371 | ··-·no_reboot_needed | 401 | ··-·no_reboot_needed |
| 372 | ··-·restrict_strategy | 402 | ··-·restrict_strategy |
| 373 | ··-·rpm_verify_permissions | 403 | ··-·rpm_verify_permissions |
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 828457/836213 bytes (99.07%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037d10:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d20:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d20:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d30:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d30:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d40:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d40:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d50:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d50:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d70:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037d70:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d80:·3131·2d30·3 | 00037d80:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037d90:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d90:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037da0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037da0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037db0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037db0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037dc0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037dc0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037dd0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037dd0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037de0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037de0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037df0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037df0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 14650, 177 lines modified | Offset 14650, 177 lines modified | ||
| 00039390:·7461·7267·6574·3d22·2369·646d·3930·3333··target="#idm9033 | 00039390:·7461·7267·6574·3d22·2369·646d·3930·3333··target="#idm9033 | ||
| 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00039400:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 00039410:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00039420:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00039430:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00039440:·6522·2069·643d·2269·646d·3930·3333·223e··e"·id="idm9033"> | |||
| 00039450:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00039460:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00039400:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00039410:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00039420:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039430:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039440:·7365·2220·6964·3d22·6964·6d39·3033·3322··se"·id="idm9033" | |||
| 00039450:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039460:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039470:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 000394 | 00039470:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 000394 | 00039480:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 00039490:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000394a0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 000394b0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000394c0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 000394d0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 000394e0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 000394f0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00039500:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00039510:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00039520:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 00039530:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00039540:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 00039550:·696e·7374·616c·6c5f·676c·6962·630a·0a63··install_glibc..c | |||
| 00039560:·6c61·7373·2069·6e73·7461·6c6c·5f67·6c69··lass·install_gli | |||
| 00039570:·6263·207b·0a20·2070·6163·6b61·6765·207b··bc·{.··package·{ | |||
| 00039580:·2027·676c·6962·6327·3a0a·2020·2020·656e···'glibc':.····en | |||
| 00039590:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 000395a0:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 000395b0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 000395c0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 000395d0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 000395e0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 000395f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00039600:·2369·646d·3930·3334·2220·7461·6269·6e64··#idm9034"·tabind | |||
| 00039610:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00039620:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00039630:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00039640:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00039650:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00039660:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 00039670:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 00039680:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00039690:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 000396a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000396b0:·3930·3334·223e·3c74·6162·6c65·2063·6c61··9034"><table·cla | |||
| 000396c0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 000396d0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 000396e0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 000396f0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00039700:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00039710:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039720:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00039 | 00039730:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 00039 | 00039740:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 000394c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 000394d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039 | 00039750:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 00039760:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00039770:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00039 | 00039780:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 00039790:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 000397a0:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a69··le><pre><code>.i | |||
| 000397b0:·6620·2120·7270·6d20·2d71·202d·2d71·7569··f·!·rpm·-q·--qui | |||
| 000397c0:·6574·2022·676c·6962·6322·203b·2074·6865··et·"glibc"·;·the | |||
| 000397d0:·6e0a·2020·2020·7975·6d20·696e·7374·616c··n.····yum·instal | |||
| 000397e0:·6c20·2d79·2022·676c·6962·6322·0a66·690a··l·-y·"glibc".fi. | |||
| 00039500:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039510:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039520:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00039530:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00039540:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 00039550:·2045·6e73·7572·6520·676c·6962·6320·6973···Ensure·glibc·is | |||
| 00039560:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00039570:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00039580:·676c·6962·630a·2020·2020·7374·6174·653a··glibc.····state: | |||
| 00039590:·2070·7265·7365·6e74·0a20·2074·6167·733a···present.··tags: | |||
| 000395a0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 000395b0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 000395c0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 000395d0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 000395e0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 000395f0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 00039600:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 00039610:·676c·6962·635f·696e·7374·616c·6c65·640a··glibc_installed. | |||
| 00039 | 000397f0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 00039 | 00039800:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 00039 | 00039810:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 00039 | 00039820:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 00039 | 00039830:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00039 | 00039840:·3d22·2369·646d·3930·3335·2220·7461·6269··="#idm9035"·tabi | ||
| 00039 | 00039850:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00039 | 00039860:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00039 | 00039870:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00039 | 00039880:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00039 | 00039890:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00039 | 000398a0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 000396e0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| Max diff block lines reached; 198640/222844 bytes (89.14%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Security·Profile·of·Oracle·Linux·7·for·SAP | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Security·Profile·of·Oracle·Linux·7·for·SAP |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_sap | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_sap |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:oracle:linux:7 | 43 | ····*·cpe:/o:oracle:linux:7 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8O_\x8b_\x8s_\x8o_\x8l_\x8e_\x8t_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8O_\x8b_\x8s_\x8o_\x8l_\x8e_\x8t_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 64, 120 lines modified | Offset 64, 120 lines modified | ||
| 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the | 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the |
| 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: | 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: |
| 66 | $·sudo·yum·install·glibc | 66 | $·sudo·yum·install·glibc |
| 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux | 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux |
| 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. | 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. |
| 69 | Severity: ·medium | 69 | Severity: ·medium |
| 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed | 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed |
| 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 72 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 73 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 74 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 75 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 76 | -·name:·Ensure·glibc·is·installed | ||
| 77 | ··package: | ||
| 78 | ····name:·glibc | ||
| 79 | ····state:·present | ||
| 80 | ··tags: | ||
| 81 | ··-·enable_strategy | ||
| 82 | ··-·low_complexity | ||
| 83 | ··-·low_disruption | ||
| 84 | ··-·medium_severity | ||
| 85 | ··-·no_reboot_needed | ||
| 86 | ··-·package_glibc_installed | ||
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 72 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 73 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 74 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 75 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 92 | include·install_glibc | 76 | include·install_glibc |
| 93 | class·install_glibc·{ | 77 | class·install_glibc·{ |
| 94 | ··package·{·'glibc': | 78 | ··package·{·'glibc': |
| 95 | ····ensure·=>·'installed', | 79 | ····ensure·=>·'installed', |
| 96 | ··} | 80 | ··} |
| 97 | } | 81 | } |
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 99 | [[packages]] | ||
| 100 | name·=·"glibc" | ||
| 101 | version·=·"*" | ||
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 82 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 83 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 84 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 85 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 86 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 107 | if·!·rpm·-q·--quiet·"glibc"·;·then | 87 | if·!·rpm·-q·--quiet·"glibc"·;·then |
| 108 | ····yum·install·-y·"glibc" | 88 | ····yum·install·-y·"glibc" |
| 109 | fi | 89 | fi |
| 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 91 | [[packages]] | ||
| 92 | name·=·"glibc" | ||
| 93 | version·=·"*" | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 115 | package·--add=glibc | 99 | package·--add=glibc |
| 116 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 117 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated | ||
| 118 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information | ||
| 119 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: | ||
| 120 | $·sudo·yum·install·uuidd | ||
| 121 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. | ||
| 122 | Severity: ·medium | ||
| 123 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | -·name:·Ensure· | 105 | -·name:·Ensure·glibc·is·installed |
| 130 | ··package: | 106 | ··package: |
| 131 | ····name:· | 107 | ····name:·glibc |
| 132 | ····state:·present | 108 | ····state:·present |
| 133 | ··tags: | 109 | ··tags: |
| 134 | ··-·enable_strategy | 110 | ··-·enable_strategy |
| 135 | ··-·low_complexity | 111 | ··-·low_complexity |
| 136 | ··-·low_disruption | 112 | ··-·low_disruption |
| 137 | ··-·medium_severity | 113 | ··-·medium_severity |
| 138 | ··-·no_reboot_needed | 114 | ··-·no_reboot_needed |
| 139 | ··-·package_ | 115 | ··-·package_glibc_installed |
| 116 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 117 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated | ||
| 118 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information | ||
| 119 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: | ||
| 120 | $·sudo·yum·install·uuidd | ||
| 121 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. | ||
| 122 | Severity: ·medium | ||
| 123 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | include·install_uuidd | 129 | include·install_uuidd |
| 146 | class·install_uuidd·{ | 130 | class·install_uuidd·{ |
| 147 | ··package·{·'uuidd': | 131 | ··package·{·'uuidd': |
| 148 | ····ensure·=>·'installed', | 132 | ····ensure·=>·'installed', |
| 149 | ··} | 133 | ··} |
| 150 | } | 134 | } |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | [[packages]] | ||
| 153 | name·=·"uuidd" | ||
| 154 | version·=·"*" | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 25489/31749 bytes (80.28%) of diff not shown. | |||
| Offset 14286, 15 lines modified | Offset 14286, 15 lines modified | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d40:·2d31·312d·303 | 00037d40:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15108, 310 lines modified | Offset 15108, 310 lines modified | ||
| 0003b030:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | 0003b030:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | ||
| 0003b040:·3939·2220·7461·6269·6e64·6578·3d22·3022··99"·tabindex="0" | 0003b040:·3939·2220·7461·6269·6e64·6578·3d22·3022··99"·tabindex="0" | ||
| 0003b050:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b050:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b060:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b060:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b070:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b070:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b080:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b080:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b090:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b090:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b0a0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b0b0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b0c0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b0d0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b0e0:·6522·2069·643d·2269·646d·3532·3939·223e··e"·id="idm5299"> | |||
| 0003b0f0:·3c70·7265·3e3c·636f·6465·3e0a·2320·4669··<pre><code>.#·Fi | |||
| 0003b100:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | |||
| 0003b110:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | |||
| 0003b120:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | |||
| 0003b130:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | |||
| 0003b140:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | |||
| 0003b150:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | |||
| 0003b160:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | |||
| 0003b0a0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b0b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b0c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b0d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b0e0:·6170·7365·2220·6964·3d22·6964·6d35·3239··apse"·id="idm529 | |||
| 0003b0f0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b100:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b110:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b120:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b130:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b140:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b150:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | |||
| 0003b160:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b170:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | |||
| 0003b180:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | |||
| 0003b190:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b1a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b1b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b1c0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003b1d0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003b1e0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b1f0:·3e2d·206e·616d·653a·2027·5365·7420·6661··>-·name:·'Set·fa | |||
| 0003b200:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | |||
| 0003b210:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | |||
| 0003b220:·6d6d·616e·6427·0a20·2073·6574·5f66·6163··mmand'.··set_fac | |||
| 0003b230:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | |||
| 0003b240:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | |||
| 0003b250:·5f63·6d64·3a20·7975·6d20·7265·696e·7374··_cmd:·yum·reinst | |||
| 0003b260:·616c·6c20·2d79·0a20·2077·6865·6e3a·2061··all·-y.··when:·a | |||
| 0003b270:·6e73·6962·6c65·5f64·6973·7472·6962·7574··nsible_distribut | |||
| 0003b280:·696f·6e20·696e·205b·2022·4665·646f·7261··ion·in·[·"Fedora | |||
| 0003b290:·222c·2022·5265·6448·6174·222c·2022·4365··",·"RedHat",·"Ce | |||
| 0003b2a0:·6e74·4f53·222c·2022·4f72·6163·6c65·4c69··ntOS",·"OracleLi | |||
| 0003b2b0:·6e75·7822·205d·0a20·2074·6167·733a·0a20··nux"·].··tags:.· | |||
| 0003b2c0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | |||
| 0003b2d0:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | |||
| 0003b2e0:·4c30·372d·3030·2d30·3130·3032·300a·2020··L07-00-010020.·· | |||
| 0003b2f0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | |||
| 0003b300:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | |||
| 0003b310:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | |||
| 0003b320:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | |||
| 0003b330:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | |||
| 0003b340:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | |||
| 0003b350:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b360:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | |||
| 0003b370:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | |||
| 0003b380:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | |||
| 0003b390:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b3a0:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | |||
| 0003b3b0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b3c0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b3d0:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | |||
| 0003b3e0:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | |||
| 0003b3f0:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | |||
| 0003b400:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | |||
| 0003b410:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b420:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | |||
| 0003b430:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | |||
| 0003b440:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | |||
| 0003b450:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | |||
| 0003b460:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | |||
| 0003b470:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | |||
| 0003b480:·6d6d·616e·6420·287a·7970·7065·7229·270a··mmand·(zypper)'. | |||
| 0003b490:·2020·7365·745f·6661·6374·3a0a·2020·2020····set_fact:.···· | |||
| 0003b4a0:·7061·636b·6167·655f·6d61·6e61·6765·725f··package_manager_ | |||
| 0003b4b0:·7265·696e·7374·616c·6c5f·636d·643a·207a··reinstall_cmd:·z | |||
| 0003b4c0:·7970·7065·7220·696e·202d·6620·2d79·0a20··ypper·in·-f·-y.· | |||
| 0003b4d0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f64···when:·ansible_d | |||
| 0003b4e0:·6973·7472·6962·7574·696f·6e20·3d3d·2022··istribution·==·" | |||
| 0003b4f0:·534c·4553·220a·2020·7461·6773·3a0a·2020··SLES".··tags:.·· | |||
| 0003b500:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | |||
| 0003b510:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | |||
| 0003b520:·3037·2d30·302d·3031·3030·3230·0a20·202d··07-00-010020.··- | |||
| 0003b530:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | |||
| 0003b540:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | |||
| 0003b550:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | |||
| 0003b560:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | |||
| 0003b570:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | |||
| 0003b580:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | |||
| 0003b590:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b5a0:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | |||
| 0003b5b0:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | |||
| 0003b5c0:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | |||
| 0003b5d0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b5e0:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | |||
| 0003b5f0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b600:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b610:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | |||
| 0003b620:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | |||
| 0003b630:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | |||
| 0003b640:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | |||
| Max diff block lines reached; 9330956/9373514 bytes (99.55%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·7 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·7 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:7 | 42 | ····*·cpe:/o:oracle:linux:7 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 95, 14 lines modified | Offset 95, 27 lines modified | ||
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 99 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 103 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 104 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 105 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 106 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 107 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 108 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 109 | fi | ||
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 107 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 115 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 108 | ··set_fact: | 116 | ··set_fact: |
| Offset 234, 27 lines modified | Offset 247, 14 lines modified | ||
| 234 | ··-·PCI-DSSv4-11.5.2 | 247 | ··-·PCI-DSSv4-11.5.2 |
| 235 | ··-·high_complexity | 248 | ··-·high_complexity |
| 236 | ··-·high_severity | 249 | ··-·high_severity |
| 237 | ··-·medium_disruption | 250 | ··-·medium_disruption |
| 238 | ··-·no_reboot_needed | 251 | ··-·no_reboot_needed |
| 239 | ··-·restrict_strategy | 252 | ··-·restrict_strategy |
| 240 | ··-·rpm_verify_hashes | 253 | ··-·rpm_verify_hashes |
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 242 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 243 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 244 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 245 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 246 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 247 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 248 | fi | ||
| 249 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 254 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 250 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 255 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 251 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 256 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 252 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 257 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 253 | $·rpm·-qf·FILENAME | 258 | $·rpm·-qf·FILENAME |
| 254 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 259 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 277, 14 lines modified | Offset 277, 44 lines modified | ||
| 277 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 277 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 278 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 278 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 279 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 279 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 280 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 280 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 281 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 281 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 283 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 283 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 284 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 285 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 286 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 287 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 288 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 289 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 290 | declare·-A·SETPERMS_RPM_DICT | ||
| 291 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 292 | #·is·expected·by·the·RPM·database | ||
| 293 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 294 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 295 | do | ||
| 296 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 297 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 298 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 299 | ········do | ||
| 300 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 301 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 302 | ········done | ||
| 303 | done | ||
| 304 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 305 | #·correct·values | ||
| 306 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 307 | do | ||
| 308 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 309 | done | ||
| 284 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 310 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 285 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 311 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 286 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 312 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 287 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 313 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 288 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 314 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 289 | -·name:·Read·list·of·files·with·incorrect·permissions | 315 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 290 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 316 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 365, 44 lines modified | Offset 395, 14 lines modified | ||
| 365 | ··-·PCI-DSSv4-11.5.2 | 395 | ··-·PCI-DSSv4-11.5.2 |
| 366 | ··-·high_complexity | 396 | ··-·high_complexity |
| 367 | ··-·high_severity | 397 | ··-·high_severity |
| 368 | ··-·medium_disruption | 398 | ··-·medium_disruption |
| 369 | ··-·no_reboot_needed | 399 | ··-·no_reboot_needed |
| 370 | ··-·restrict_strategy | 400 | ··-·restrict_strategy |
| 371 | ··-·rpm_verify_permissions | 401 | ··-·rpm_verify_permissions |
| 372 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 373 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 374 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 766445/774089 bytes (99.01%) of diff not shown. | |||
| Offset 14279, 15 lines modified | Offset 14279, 15 lines modified | ||
| 00037c60:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037c60:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037c70:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037c70:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037c80:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037c80:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037c90:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037c90:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ca0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ca0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037cc0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00037cc0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037cd0:·303 | 00037cd0:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00037ce0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037ce0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037cf0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037cf0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037d00:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037d00:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037d10:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037d10:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037d20:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037d20:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037d30:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037d30:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037d40:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037d40:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15172, 310 lines modified | Offset 15172, 310 lines modified | ||
| 0003b430:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b430:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b440:·2369·646d·3532·3939·2220·7461·6269·6e64··#idm5299"·tabind | 0003b440:·2369·646d·3532·3939·2220·7461·6269·6e64··#idm5299"·tabind | ||
| 0003b450:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b450:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b460:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b460:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b470:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b470:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b480:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b480:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b490:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b490:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4a0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b4b0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b4c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b4d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b4e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b4f0:·3532·3939·223e·3c70·7265·3e3c·636f·6465··5299"><pre><code | |||
| 0003b500:·3e0a·2320·4669·6e64·2077·6869·6368·2066··>.#·Find·which·f | |||
| 0003b510:·696c·6573·2068·6176·6520·696e·636f·7272··iles·have·incorr | |||
| 0003b520:·6563·7420·6861·7368·2028·6e6f·7420·696e··ect·hash·(not·in | |||
| 0003b530:·202f·6574·632c·2062·6563·6175·7365·206f···/etc,·because·o | |||
| 0003b540:·6620·7468·6520·7379·7374·656d·2072·656c··f·the·system·rel | |||
| 0003b550:·6174·6564·2063·6f6e·6669·6720·6669·6c65··ated·config·file | |||
| 0003b560:·7329·2061·6e64·2074·6865·6e20·6765·7420··s)·and·then·get· | |||
| 0003b570:·6669·6c65·7320·6e61·6d65·730a·6669·6c65··files·names.file | |||
| 0003b580:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003b590:·5f68·6173·683d·2224·2872·706d·202d·5661··_hash="$(rpm·-Va | |||
| 0003b5a0:·202d·2d6e·6f63·6f6e·6669·6720·7c20·6772···--noconfig·|·gr | |||
| 0003b5b0:·6570·202d·4520·275e·2e2e·3527·207c·2061··ep·-E·'^..5'·|·a | |||
| 0003b5c0:·776b·2027·7b70·7269·6e74·2024·4e46·7d27··wk·'{print·$NF}' | |||
| 0003b5d0:·2029·220a·0a69·6620·5b20·2d6e·2022·2466···)"..if·[·-n·"$f | |||
| 0003b5e0:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003b5f0:·6563·745f·6861·7368·2220·5d3b·2074·6865··ect_hash"·];·the | |||
| 0003b600:·6e0a·2020·2020·2320·4672·6f6d·2066·696c··n.····#·From·fil | |||
| 0003b610:·6573·206e·616d·6573·2067·6574·2070·6163··es·names·get·pac | |||
| 0003b620:·6b61·6765·206e·616d·6573·2061·6e64·2063··kage·names·and·c | |||
| 0003b630:·6861·6e67·6520·6e65·776c·696e·6520·746f··hange·newline·to | |||
| 0003b640:·2073·7061·6365·2c20·6265·6361·7573·6520···space,·because· | |||
| 0003b650:·7270·6d20·7772·6974·6573·2065·6163·6820··rpm·writes·each· | |||
| 0003b660:·7061·636b·6167·6520·746f·206e·6577·206c··package·to·new·l | |||
| 0003b670:·696e·650a·2020·2020·7061·636b·6167·6573··ine.····packages | |||
| 0003b680:·5f74·6f5f·7265·696e·7374·616c·6c3d·2224··_to_reinstall="$ | |||
| 0003b690:·2872·706d·202d·7166·2024·6669·6c65·735f··(rpm·-qf·$files_ | |||
| 0003b6a0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003b6b0:·6173·6820·7c20·7472·2027·5c6e·2720·2720··ash·|·tr·'\n'·'· | |||
| 0003b6c0:·2729·220a·0a20·2020·200a·2020·2020·7975··')"..····.····yu | |||
| 0003b6d0:·6d20·7265·696e·7374·616c·6c20·2d79·2024··m·reinstall·-y·$ | |||
| 0003b6e0:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003b6f0:·7374·616c·6c0a·2020·2020·0a66·690a·3c2f··stall.····.fi.</ | |||
| 0003b700:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b710:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b720:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b730:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b740:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b750:·2369·646d·3533·3030·2220·7461·6269·6e64··#idm5300"·tabind | |||
| 0003b760:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b770:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b780:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b790:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b7a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b | 0003b7b0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003b | 0003b7c0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003b | 0003b7d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b | 0003b7e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b | 0003b7f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b | 0003b800:·6964·6d35·3330·3022·3e3c·7461·626c·6520··idm5300"><table· | ||
| 0003b | 0003b810:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003b | 0003b820:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003b | 0003b830:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003b | 0003b840:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003b | 0003b850:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003b | 0003b860:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | ||
| 0003b | 0003b870:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b | 0003b880:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003b890:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003b | 0003b8a0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003b | 0003b8b0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003b | 0003b8c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b8d0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003b | 0003b8e0:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003b | 0003b8f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b | 0003b900:·3e3c·636f·6465·3e2d·206e·616d·653a·2027··><code>-·name:·' | ||
| 0003b | 0003b910:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| 0003b | 0003b920:·6520·6d61·6e61·6765·7220·7265·696e·7374··e·manager·reinst | ||
| 0003b | 0003b930:·616c·6c20·636f·6d6d·616e·6427·0a20·2073··all·command'.··s | ||
| 0003b | 0003b940:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | ||
| 0003b | 0003b950:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | ||
| 0003b | 0003b960:·6e73·7461·6c6c·5f63·6d64·3a20·7975·6d20··nstall_cmd:·yum· | ||
| 0003b | 0003b970:·7265·696e·7374·616c·6c20·2d79·0a20·2077··reinstall·-y.··w | ||
| 0003b | 0003b980:·6865·6e3a·2061·6e73·6962·6c65·5f64·6973··hen:·ansible_dis | ||
| 0003b | 0003b990:·7472·6962·7574·696f·6e20·696e·205b·2022··tribution·in·[·" | ||
| 0003b | 0003b9a0:·4665·646f·7261·222c·2022·5265·6448·6174··Fedora",·"RedHat | ||
| 0003b | 0003b9b0:·222c·2022·4365·6e74·4f53·222c·2022·4f72··",·"CentOS",·"Or | ||
| 0003b | 0003b9c0:·6163·6c65·4c69·6e75·7822·205d·0a20·2074··acleLinux"·].··t | ||
| 0003b | 0003b9d0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b | 0003b9e0:·3130·2e34·2e31·0a20·202d·2044·4953·412d··10.4.1.··-·DISA- | ||
| 0003b | 0003b9f0:·5354·4947·2d4f·4c30·372d·3030·2d30·3130··STIG-OL07-00-010 | ||
| 0003b | 0003ba00:·3032·300a·2020·2d20·4e49·5354·2d38·3030··020.··-·NIST-800 | ||
| 0003b | 0003ba10:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003b | 0003ba20:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003b | 0003ba30:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003b | 0003ba40:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003b | 0003ba50:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003b | 0003ba60:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b | 0003ba70:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003b | 0003ba80:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003b | 0003ba90:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b | 0003baa0:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003b | 0003bab0:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003b | 0003bac0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003b | 0003bad0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003b | 0003bae0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003b | 0003baf0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003b | 0003bb00:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003b | 0003bb10:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| Max diff block lines reached; 21941729/21960689 bytes (99.91%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·7 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·7 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:7 | 41 | ····*·cpe:/o:oracle:linux:7 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 107, 14 lines modified | Offset 107, 27 lines modified | ||
| 107 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 107 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 113 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 113 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 115 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 116 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 117 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 118 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 119 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 120 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 121 | fi | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 119 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 127 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 120 | ··set_fact: | 128 | ··set_fact: |
| Offset 246, 27 lines modified | Offset 259, 14 lines modified | ||
| 246 | ··-·PCI-DSSv4-11.5.2 | 259 | ··-·PCI-DSSv4-11.5.2 |
| 247 | ··-·high_complexity | 260 | ··-·high_complexity |
| 248 | ··-·high_severity | 261 | ··-·high_severity |
| 249 | ··-·medium_disruption | 262 | ··-·medium_disruption |
| 250 | ··-·no_reboot_needed | 263 | ··-·no_reboot_needed |
| 251 | ··-·restrict_strategy | 264 | ··-·restrict_strategy |
| 252 | ··-·rpm_verify_hashes | 265 | ··-·rpm_verify_hashes |
| 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 254 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 255 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 256 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 257 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 258 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 259 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 260 | fi | ||
| 261 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 266 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 262 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 267 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 263 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 268 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 264 | run·the·following·command·to·determine·which·package·owns·it: | 269 | run·the·following·command·to·determine·which·package·owns·it: |
| 265 | $·rpm·-qf·FILENAME | 270 | $·rpm·-qf·FILENAME |
| 266 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 271 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 267 | $·sudo·rpm·--setugids·PACKAGENAME | 272 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 287, 14 lines modified | Offset 287, 40 lines modified | ||
| 287 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 287 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 288 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 288 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 289 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 289 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 290 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 290 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 291 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 291 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 292 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 292 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 293 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 293 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 295 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 296 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 297 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 298 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 299 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 300 | declare·-A·SETPERMS_RPM_DICT | ||
| 301 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 302 | #·is·expected·by·the·RPM·database | ||
| 303 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 304 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 305 | do | ||
| 306 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 307 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 308 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 309 | done | ||
| 310 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 311 | #·correct·values | ||
| 312 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 313 | do | ||
| 314 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 315 | done | ||
| 294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 316 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 295 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 317 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 296 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 318 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 297 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 319 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 298 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 320 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 299 | -·name:·Read·list·of·files·with·incorrect·ownership | 321 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 300 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 322 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 372, 40 lines modified | Offset 398, 14 lines modified | ||
| 372 | ··-·PCI-DSSv4-11.5.2 | 398 | ··-·PCI-DSSv4-11.5.2 |
| 373 | ··-·high_complexity | 399 | ··-·high_complexity |
| 374 | ··-·high_severity | 400 | ··-·high_severity |
| 375 | ··-·medium_disruption | 401 | ··-·medium_disruption |
| 376 | ··-·no_reboot_needed | 402 | ··-·no_reboot_needed |
| 377 | ··-·restrict_strategy | 403 | ··-·restrict_strategy |
| 378 | ··-·rpm_verify_ownership | 404 | ··-·rpm_verify_ownership |
| 379 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 380 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 381 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 382 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 383 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 384 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1750827/1758185 bytes (99.58%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dd0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037de0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037de0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037df0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037df0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e00:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e00:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e10:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e10:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e20:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e20:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e30:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e30:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e40:·3230·3234·2d31·312d·303 | 00037e40:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e50:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e60:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e60:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e70:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e70:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e80:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e80:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e90:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e90:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037ea0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037ea0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037eb0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037eb0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15191, 309 lines modified | Offset 15191, 309 lines modified | ||
| 0003b560:·6765·743d·2223·6964·6d35·3239·3922·2074··get="#idm5299"·t | 0003b560:·6765·743d·2223·6964·6d35·3239·3922·2074··get="#idm5299"·t | ||
| 0003b570:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b570:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b580:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b580:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b590:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b590:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b5a0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b5a0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b5b0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b5b0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b5c0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b5c0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b5d0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b5e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b5f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b600:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b610:·3d22·6964·6d35·3239·3922·3e3c·7072·653e··="idm5299"><pre> | |||
| 0003b620:·3c63·6f64·653e·0a23·2046·696e·6420·7768··<code>.#·Find·wh | |||
| 0003b630:·6963·6820·6669·6c65·7320·6861·7665·2069··ich·files·have·i | |||
| 0003b5d0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b5e0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b5f0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b600:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b610:·2069·643d·2269·646d·3532·3939·223e·3c74···id="idm5299"><t | |||
| 0003b620:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b630:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b640:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b650:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b660:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b670:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | |||
| 0003b680:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b690:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b6a0:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | |||
| 0003b6b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b6c0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b6d0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b6e0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b6f0:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 0003b700:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b710:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b720:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | |||
| 0003b730:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | |||
| 0003b740:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | |||
| 0003b750:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | |||
| 0003b760:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | |||
| 0003b770:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | |||
| 0003b780:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | |||
| 0003b790:·790a·2020·7768·656e·3a20·616e·7369·626c··y.··when:·ansibl | |||
| 0003b7a0:·655f·6469·7374·7269·6275·7469·6f6e·2069··e_distribution·i | |||
| 0003b7b0:·6e20·5b20·2246·6564·6f72·6122·2c20·2252··n·[·"Fedora",·"R | |||
| 0003b7c0:·6564·4861·7422·2c20·2243·656e·744f·5322··edHat",·"CentOS" | |||
| 0003b7d0:·2c20·224f·7261·636c·654c·696e·7578·2220··,·"OracleLinux"· | |||
| 0003b7e0:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b7f0:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | |||
| 0003b800:·4449·5341·2d53·5449·472d·4f4c·3037·2d30··DISA-STIG-OL07-0 | |||
| 0003b810:·302d·3031·3030·3230·0a20·202d·204e·4953··0-010020.··-·NIS | |||
| 0003b820:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | |||
| 0003b830:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003b840:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | |||
| 0003b850:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | |||
| 0003b860:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b870:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | |||
| 0003b880:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | |||
| 0003b890:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b8a0:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | |||
| 0003b8b0:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | |||
| 0003b8c0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | |||
| 0003b8d0:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | |||
| 0003b8e0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b8f0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b900:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | |||
| 0003b910:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | |||
| 0003b920:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | |||
| 0003b930:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | |||
| 0003b940:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b950:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003b960:·7465·6779·0a20·202d·2072·706d·5f76·6572··tegy.··-·rpm_ver | |||
| 0003b970:·6966·795f·6861·7368·6573·0a0a·2d20·6e61··ify_hashes..-·na | |||
| 0003b980:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | |||
| 0003b990:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | |||
| 0003b9a0:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | |||
| 0003b9b0:·2028·7a79·7070·6572·2927·0a20·2073·6574···(zypper)'.··set | |||
| 0003b9c0:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | |||
| 0003b9d0:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | |||
| 0003b9e0:·7461·6c6c·5f63·6d64·3a20·7a79·7070·6572··tall_cmd:·zypper | |||
| 0003b9f0:·2069·6e20·2d66·202d·790a·2020·7768·656e···in·-f·-y.··when | |||
| 0003ba00:·3a20·616e·7369·626c·655f·6469·7374·7269··:·ansible_distri | |||
| 0003ba10:·6275·7469·6f6e·203d·3d20·2253·4c45·5322··bution·==·"SLES" | |||
| 0003ba20:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003ba30:·532d·352e·3130·2e34·2e31·0a20·202d·2044··S-5.10.4.1.··-·D | |||
| 0003ba40:·4953·412d·5354·4947·2d4f·4c30·372d·3030··ISA-STIG-OL07-00 | |||
| 0003ba50:·2d30·3130·3032·300a·2020·2d20·4e49·5354··-010020.··-·NIST | |||
| 0003ba60:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | |||
| 0003ba70:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | |||
| 0003ba80:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | |||
| 0003ba90:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | |||
| 0003baa0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003bab0:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | |||
| 0003bac0:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | |||
| 0003bad0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | |||
| 0003bae0:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | |||
| 0003baf0:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | |||
| 0003bb00:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | |||
| 0003bb10:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | |||
| 0003bb20:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003bb30:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003bb40:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | |||
| 0003bb50:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | |||
| 0003bb60:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | |||
| 0003bb70:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | |||
| 0003bb80:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003bb90:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | |||
| 0003bba0:·6567·790a·2020·2d20·7270·6d5f·7665·7269··egy.··-·rpm_veri | |||
| 0003bbb0:·6679·5f68·6173·6865·730a·0a2d·206e·616d··fy_hashes..-·nam | |||
| 0003bbc0:·653a·2052·6561·6420·6669·6c65·7320·7769··e:·Read·files·wi | |||
| 0003b | 0003b640:·6e63·6f72·7265·6374·2068·6173·6820·286e··ncorrect·hash·(n | ||
| Max diff block lines reached; 21923828/21942926 bytes (99.91%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·7 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·7 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:7 | 46 | ····*·cpe:/o:oracle:linux:7 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 111, 14 lines modified | Offset 111, 27 lines modified | ||
| 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r853660_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 131 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 124 | ··set_fact: | 132 | ··set_fact: |
| Offset 250, 27 lines modified | Offset 263, 14 lines modified | ||
| 250 | ··-·PCI-DSSv4-11.5.2 | 263 | ··-·PCI-DSSv4-11.5.2 |
| 251 | ··-·high_complexity | 264 | ··-·high_complexity |
| 252 | ··-·high_severity | 265 | ··-·high_severity |
| 253 | ··-·medium_disruption | 266 | ··-·medium_disruption |
| 254 | ··-·no_reboot_needed | 267 | ··-·no_reboot_needed |
| 255 | ··-·restrict_strategy | 268 | ··-·restrict_strategy |
| 256 | ··-·rpm_verify_hashes | 269 | ··-·rpm_verify_hashes |
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 258 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 259 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 260 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 261 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 262 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 263 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 264 | fi | ||
| 265 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 266 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 271 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 267 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 272 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 268 | run·the·following·command·to·determine·which·package·owns·it: | 273 | run·the·following·command·to·determine·which·package·owns·it: |
| 269 | $·rpm·-qf·FILENAME | 274 | $·rpm·-qf·FILENAME |
| 270 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 271 | $·sudo·rpm·--setugids·PACKAGENAME | 276 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 291, 14 lines modified | Offset 291, 40 lines modified | ||
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 294 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 294 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 295 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 295 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 296 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 296 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 297 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule | 297 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r880585_rule |
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 303 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 304 | declare·-A·SETPERMS_RPM_DICT | ||
| 305 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 306 | #·is·expected·by·the·RPM·database | ||
| 307 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 308 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 309 | do | ||
| 310 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 311 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 312 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 313 | done | ||
| 314 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 315 | #·correct·values | ||
| 316 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 317 | do | ||
| 318 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 319 | done | ||
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 321 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 322 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 323 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 324 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 303 | -·name:·Read·list·of·files·with·incorrect·ownership | 325 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 304 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 326 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 376, 40 lines modified | Offset 402, 14 lines modified | ||
| 376 | ··-·PCI-DSSv4-11.5.2 | 402 | ··-·PCI-DSSv4-11.5.2 |
| 377 | ··-·high_complexity | 403 | ··-·high_complexity |
| 378 | ··-·high_severity | 404 | ··-·high_severity |
| 379 | ··-·medium_disruption | 405 | ··-·medium_disruption |
| 380 | ··-·no_reboot_needed | 406 | ··-·no_reboot_needed |
| 381 | ··-·restrict_strategy | 407 | ··-·restrict_strategy |
| 382 | ··-·rpm_verify_ownership | 408 | ··-·rpm_verify_ownership |
| 383 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 384 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 385 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 386 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 387 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 388 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1746379/1753750 bytes (99.58%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037de0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037df0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037df0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037e00:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037e00:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e10:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e10:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e20:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e20:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e40:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037e40:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037e50:·2d31·312d·303 | 00037e50:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037e60:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e60:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e70:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e70:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e80:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e80:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e90:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e90:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037ea0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037ea0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037eb0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037eb0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ec0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ec0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15054, 202 lines modified | Offset 15054, 202 lines modified | ||
| 0003acd0:·6172·6765·743d·2223·6964·6d35·3638·3422··arget="#idm5684" | 0003acd0:·6172·6765·743d·2223·6964·6d35·3638·3422··arget="#idm5684" | ||
| 0003ace0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003ace0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003acf0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003acf0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003ad00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003ad00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003ad10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003ad10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003ad20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003ad20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003ad30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003ad30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003ad40:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003ad50:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ad60:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ad70:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ad80:·2220·6964·3d22·6964·6d35·3638·3422·3e3c··"·id="idm5684">< | |||
| 0003ad90:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003ada0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003ad40:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003ad50:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ad60:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ad70:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ad80:·6522·2069·643d·2269·646d·3536·3834·223e··e"·id="idm5684"> | |||
| 0003ad90:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ada0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003adb0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ad | 0003adb0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003adc0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003add0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003ade0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003add0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ade0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003adf0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ae00:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ae10:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ae20:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003ae30:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003ae40:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ae50:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003ae60:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003ae70:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003ae80:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003ae90:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003aea0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003aeb0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003aec0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003aed0:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003aee0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003aef0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003af00:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003af10:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003af20:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003af30:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003af40:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003af50:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | |||
| 0003af60:·2d30·302d·3031·3033·3539·0a20·202d·204e··-00-010359.··-·N | |||
| 0003af70:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003af80:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003af90:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003afa0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003afb0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003afc0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003afd0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003afe0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003aff0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b000:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b010:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b020:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b030:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b040:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b050:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b060:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b070:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b080:·6d35·3638·3522·2074·6162·696e·6465·783d··m5685"·tabindex= | |||
| 0003b090:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b0a0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b0b0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b0c0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b0d0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b0e0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b0f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b100:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b110:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b120:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b130:·3638·3522·3e3c·7461·626c·6520·636c·6173··685"><table·clas | |||
| 0003b140:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b150:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b160:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b170:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b180:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b190:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b1a0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b1b0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b1c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b1d0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b1e0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b1f0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b200:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003 | 0003adf0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003 | 0003ae00:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003ae10:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ae20:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003ae30:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003ae40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ae50:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003ae60:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003ae70:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003ae80:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003ae90:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003 | 0003aea0:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | ||
| 0003aeb0:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003aec0:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003aed0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003aee0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b240:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| Max diff block lines reached; 21840474/21868128 bytes (99.87%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037dd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037de0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037de0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037df0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037df0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e30:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037e30:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037e40:·2d31·312d·303 | 00037e40:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037e50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037ea0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037ea0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037eb0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037eb0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15059, 202 lines modified | Offset 15059, 202 lines modified | ||
| 0003ad20:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | 0003ad20:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | ||
| 0003ad30:·3834·2220·7461·6269·6e64·6578·3d22·3022··84"·tabindex="0" | 0003ad30:·3834·2220·7461·6269·6e64·6578·3d22·3022··84"·tabindex="0" | ||
| 0003ad40:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ad40:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ad50:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ad50:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ad60:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ad60:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ad70:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ad70:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ad80:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ad80:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ad90:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003ada0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003adb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003adc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003add0:·7073·6522·2069·643d·2269·646d·3536·3834··pse"·id="idm5684 | |||
| 0003ade0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003adf0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003ad90:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003ada0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003adb0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003adc0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003add0:·6170·7365·2220·6964·3d22·6964·6d35·3638··apse"·id="idm568 | |||
| 0003ade0:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 0003adf0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ae00:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ae | 0003ae00:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003ae10:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003ae20:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ae30:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ae40:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ae50:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ae60:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ae70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ae80:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ae20:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ae30:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003ae40:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ae50:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003ae60:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ae70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003ae80:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003ae90:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003aea0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003aeb0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003aec0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003aed0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003aee0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003aef0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003af00:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003af10:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003af20:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003af30:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003af40:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003af50:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003af60:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003af70:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003af80:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003af90:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003afa0:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | |||
| 0003afb0:·4c30·382d·3030·2d30·3130·3335·390a·2020··L08-00-010359.·· | |||
| 0003afc0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003afd0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003afe0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003aff0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b000:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b010:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b020:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b030:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b040:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b050:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b060:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b070:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b080:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b090:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b0a0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b0b0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b0c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b0d0:·2369·646d·3536·3835·2220·7461·6269·6e64··#idm5685"·tabind | |||
| 0003b0e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b0f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b100:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b110:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b120:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b130:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003b140:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b150:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b160:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b170:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b180:·646d·3536·3835·223e·3c74·6162·6c65·2063··dm5685"><table·c | |||
| 0003b190:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b1a0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b1b0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b1c0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b1d0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b1e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b1f0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b200:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b210:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b220:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b230:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b240:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b250:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003 | 0003ae90:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003aea0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003aeb0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003aec0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003aed0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003aee0:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003aef0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003af00:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003af10:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003af20:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003af30:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b270:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| Max diff block lines reached; 22129396/22157050 bytes (99.88%) of diff not shown. | |||
| Offset 14304, 15 lines modified | Offset 14304, 15 lines modified | ||
| 00037df0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037df0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037e00:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037e00:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037e10:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037e10:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e20:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e20:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e30:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e30:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e40:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e40:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e50:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037e50:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037e60:·2d31·312d·303 | 00037e60:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037e70:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e70:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e80:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e80:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e90:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e90:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037ea0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037ea0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037eb0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037eb0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037ec0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037ec0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ed0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ed0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15045, 202 lines modified | Offset 15045, 202 lines modified | ||
| 0003ac40:·7461·7267·6574·3d22·2369·646d·3536·3834··target="#idm5684 | 0003ac40:·7461·7267·6574·3d22·2369·646d·3536·3834··target="#idm5684 | ||
| 0003ac50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ac50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ac60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ac60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ac70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ac70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ac80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ac80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ac90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ac90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003aca0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003aca0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003acb0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003acc0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003acd0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ace0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003acf0:·6522·2069·643d·2269·646d·3536·3834·223e··e"·id="idm5684"> | |||
| 0003ad00:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ad10:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003acb0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003acc0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003acd0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ace0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003acf0:·7365·2220·6964·3d22·6964·6d35·3638·3422··se"·id="idm5684" | |||
| 0003ad00:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003ad10:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ad20:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ad | 0003ad20:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003ad40:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ad | 0003ad30:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003ad40:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ad50:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003ad60:· | 0003ad60:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003ad70:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ad80:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ad90:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003ada0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003ad70:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ad80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ad90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003ada0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003adb0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003adc0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003add0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003ade0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003adf0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003ae00:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003ae10:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003ae20:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003ae30:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003ae40:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003ae50:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003ae60:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003ae70:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003ae80:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003ae90:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003aea0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003aeb0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003aec0:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | |||
| 0003aed0:·382d·3030·2d30·3130·3335·390a·2020·2d20··8-00-010359.··-· | |||
| 0003aee0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003aef0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003af00:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003af10:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003af20:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003af30:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003af40:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003af50:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003af60:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003af70:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003af80:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003af90:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003afa0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003afb0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003afc0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003afd0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003afe0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003aff0:·646d·3536·3835·2220·7461·6269·6e64·6578··dm5685"·tabindex | |||
| 0003b000:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b010:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b020:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b030:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b040:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b050:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b060:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b070:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b080:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b090:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b0a0:·3536·3835·223e·3c74·6162·6c65·2063·6c61··5685"><table·cla | |||
| 0003b0b0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b0c0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b0d0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b0e0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b0f0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b100:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b110:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b120:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b130:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b140:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b150:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b160:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b170:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003 | 0003adb0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003 | 0003adc0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003add0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003ade0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003adf0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003ae00:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003 | 0003ae10:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | ||
| 0003ae20:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003ae30:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003ae40:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003ae50:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b1b0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b1c0:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b1d0:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| Max diff block lines reached; 8960702/8988356 bytes (99.69%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 53 lines modified | Offset 113, 26 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | -·name:·Ensure·aide·is·installed | ||
| 126 | ··package: | ||
| 127 | ····name:·aide | ||
| 128 | ····state:·present | ||
| 129 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 130 | ··tags: | ||
| 131 | ··-·CJIS-5.10.1.3 | ||
| 132 | ··-·DISA-STIG-OL08-00-010359 | ||
| 133 | ··-·NIST-800-53-CM-6(a) | ||
| 134 | ··-·PCI-DSS-Req-11.5 | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | ||
| 136 | ··-·enable_strategy | ||
| 137 | ··-·low_complexity | ||
| 138 | ··-·low_disruption | ||
| 139 | ··-·medium_severity | ||
| 140 | ··-·no_reboot_needed | ||
| 141 | ··-·package_aide_installed | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | include·install_aide | 125 | include·install_aide |
| 148 | class·install_aide·{ | 126 | class·install_aide·{ |
| 149 | ··package·{·'aide': | 127 | ··package·{·'aide': |
| 150 | ····ensure·=>·'installed', | 128 | ····ensure·=>·'installed', |
| 151 | ··} | 129 | ··} |
| 152 | } | 130 | } |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 136 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 21 lines modified | Offset 140, 48 lines modified | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | 140 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 168 | ····yum·install·-y·"aide" | 141 | ····yum·install·-y·"aide" |
| 169 | fi | 142 | fi |
| 170 | else | 143 | else |
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 144 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 172 | fi | 145 | fi |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | package·--add=aide | 155 | package·--add=aide |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | -·name:·Ensure·aide·is·installed | ||
| 162 | ··package: | ||
| 163 | ····name:·aide | ||
| 164 | ····state:·present | ||
| 165 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 166 | ··tags: | ||
| 167 | ··-·CJIS-5.10.1.3 | ||
| 168 | ··-·DISA-STIG-OL08-00-010359 | ||
| 169 | ··-·NIST-800-53-CM-6(a) | ||
| 170 | ··-·PCI-DSS-Req-11.5 | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | ||
| 172 | ··-·enable_strategy | ||
| 173 | ··-·low_complexity | ||
| 174 | ··-·low_disruption | ||
| 175 | ··-·medium_severity | ||
| 176 | ··-·no_reboot_needed | ||
| 177 | ··-·package_aide_installed | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 180 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 206, 14 lines modified | Offset 206, 28 lines modified | ||
| 206 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 206 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 207 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 207 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 209 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 209 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 210 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 211 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 212 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 212 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 981967/988011 bytes (99.39%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037de0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037df0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037df0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037e00:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037e00:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037e10:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037e10:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037e20:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037e20:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00037e40:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037e50:·303 | 00037e50:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00037e60:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037e60:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037e70:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037e70:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037e80:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037e80:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037e90:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037e90:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037ea0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037ea0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037eb0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037eb0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037ec0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037ec0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 14718, 183 lines modified | Offset 14718, 183 lines modified | ||
| 000397d0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 000397d0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 000397e0:·3035·3734·2220·7461·6269·6e64·6578·3d22··0574"·tabindex=" | 000397e0:·3035·3734·2220·7461·6269·6e64·6578·3d22··0574"·tabindex=" | ||
| 000397f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 000397f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039840:·6469·6174·696f·6e20· | 00039840:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 00039850:· | 00039850:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039860:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00039870:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00039880:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | |||
| 00039890:·3537·3422·3e3c·7461·626c·6520·636c·6173··574"><table·clas | |||
| 000398a0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00039860:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00039870:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00039880:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 00039890:·3035·3734·223e·3c74·6162·6c65·2063·6c61··0574"><table·cla | |||
| 000398a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 000398b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 000398 | 000398b0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 000398d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 000398e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 000398f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039900:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00039 | 000398c0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 000398d0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 000398e0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 000398f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039900:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00039910:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00039920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039930:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00039940:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00039950:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00039960:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 000399 | 00039970:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 00039980:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 00039990:·6c75·6465·2069·6e73·7461·6c6c·5f64·6e66··lude·install_dnf | |||
| 00039930:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00039940:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00039950:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00039960:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00039970:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00039980:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039990:·6e61·6d65·3a20·456e·7375·7265·2064·6e66··name:·Ensure·dnf | |||
| 000399a0:·2d61·7574·6f6d·6174·6963·2069·7320·696e··-automatic·is·in | |||
| 000399b0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 000399c0:·653a·0a20·2020·206e·616d·653a·2064·6e66··e:.····name:·dnf | |||
| 000399 | 000399a0:·2d61·7574·6f6d·6174·6963·0a0a·636c·6173··-automatic..clas | ||
| 000399b0:·7320·696e·7374·616c·6c5f·646e·662d·6175··s·install_dnf-au | |||
| 000399c0:·746f·6d61·7469·6320·7b0a·2020·7061·636b··tomatic·{.··pack | |||
| 000399d0:·6167·6520·7b20·2764·6e66·2d61·7574·6f6d··age·{·'dnf-autom | |||
| 000399e0:·6174·6963·273a·0a20·2020·2065·6e73·7572··atic':.····ensur | |||
| 000399f0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 00039a00:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 000399e0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 000399f0:·7461·6773·3a0a·2020·2d20·656e·6162·6c65··tags:.··-·enable | |||
| 00039a00:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00039a10:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00039a20:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00039a30:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 00039a40:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 00039a50:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 00039a60:·6b61·6765·5f64·6e66·2d61·7574·6f6d·6174··kage_dnf-automat | |||
| 00039a70:·6963·5f69·6e73·7461·6c6c·6564·0a3c·2f63··ic_installed.</c | |||
| 00039a | 00039a10:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 00039a | 00039a20:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 00039a | 00039a30:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 00039a | 00039a40:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 00039a | 00039a50:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00039a | 00039a60:·6d31·3035·3735·2220·7461·6269·6e64·6578··m10575"·tabindex | ||
| 00039a | 00039a70:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00039a | 00039a80:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00039 | 00039a90:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00039 | 00039aa0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00039 | 00039ab0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00039b30:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 00039 | 00039ac0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 00039ad0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 00039 | 00039ae0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039 | 00039af0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00039b | 00039b00:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | ||
| 00039b | 00039b10:·3537·3522·3e3c·7461·626c·6520·636c·6173··575"><table·clas | ||
| 00039b | 00039b20:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 00039b | 00039b30:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 00039b | 00039b40:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 00039b | 00039b50:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 00039b | 00039b60:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 00039b | 00039b70:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 00039b | 00039b80:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 00039 | 00039b90:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 00039 | 00039ba0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 00039 | 00039bb0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 00039c30:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039c40:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039c50:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00039 | 00039bc0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 00039bd0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00039be0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00039bf0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00039c | 00039c00:·653e·3c70·7265·3e3c·636f·6465·3e0a·6966··e><pre><code>.if | ||
| 00039c | 00039c10:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | ||
| 00039c | 00039c20:·7420·2264·6e66·2d61·7574·6f6d·6174·6963··t·"dnf-automatic | ||
| 00039c30:·2220·3b20·7468·656e·0a20·2020·2079·756d··"·;·then.····yum | |||
| 00039c40:·2069·6e73·7461·6c6c·202d·7920·2264·6e66···install·-y·"dnf | |||
| 00039c50:·2d61·7574·6f6d·6174·6963·220a·6669·0a3c··-automatic".fi.< | |||
| 00039ca0:·636c·6173·7320·696e·7374·616c·6c5f·646e··class·install_dn | |||
| 00039cb0:·662d·6175·746f·6d61·7469·6320·7b0a·2020··f-automatic·{.·· | |||
| 00039cc0:·7061·636b·6167·6520·7b20·2764·6e66·2d61··package·{·'dnf-a | |||
| 00039cd0:·7574·6f6d·6174·6963·273a·0a20·2020·2065··utomatic':.····e | |||
| Max diff block lines reached; 3611395/3636427 bytes (99.31%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 80, 63 lines modified | Offset 80, 63 lines modified | ||
| 80 | $·sudo·yum·install·dnf-automatic | 80 | $·sudo·yum·install·dnf-automatic |
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 92 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 93 | ··package: | ||
| 94 | ····name:·dnf-automatic | ||
| 95 | ····state:·present | ||
| 96 | ··tags: | ||
| 97 | ··-·enable_strategy | ||
| 98 | ··-·low_complexity | ||
| 99 | ··-·low_disruption | ||
| 100 | ··-·medium_severity | ||
| 101 | ··-·no_reboot_needed | ||
| 102 | ··-·package_dnf-automatic_installed | ||
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 108 | include·install_dnf-automatic | 92 | include·install_dnf-automatic |
| 109 | class·install_dnf-automatic·{ | 93 | class·install_dnf-automatic·{ |
| 110 | ··package·{·'dnf-automatic': | 94 | ··package·{·'dnf-automatic': |
| 111 | ····ensure·=>·'installed', | 95 | ····ensure·=>·'installed', |
| 112 | ··} | 96 | ··} |
| 113 | } | 97 | } |
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | [[packages]] | ||
| 116 | name·=·"dnf-automatic" | ||
| 117 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 103 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 124 | ····yum·install·-y·"dnf-automatic" | 104 | ····yum·install·-y·"dnf-automatic" |
| 125 | fi | 105 | fi |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 107 | [[packages]] | ||
| 108 | name·=·"dnf-automatic" | ||
| 109 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | package·--add=dnf-automatic | 115 | package·--add=dnf-automatic |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 122 | ··package: | ||
| 123 | ····name:·dnf-automatic | ||
| 124 | ····state:·present | ||
| 125 | ··tags: | ||
| 126 | ··-·enable_strategy | ||
| 127 | ··-·low_complexity | ||
| 128 | ··-·low_disruption | ||
| 129 | ··-·medium_severity | ||
| 130 | ··-·no_reboot_needed | ||
| 131 | ··-·package_dnf-automatic_installed | ||
| 132 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 132 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 133 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 133 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 134 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 134 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 135 | automatic.conf. | 135 | automatic.conf. |
| 136 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 136 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 137 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 137 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 138 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 138 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 146, 36 lines modified | Offset 146, 14 lines modified | ||
| 146 | Severity: ··medium | 146 | Severity: ··medium |
| 147 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 147 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 148 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 148 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 149 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 149 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 150 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 150 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 151 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 151 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 152 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 152 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 158 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 159 | ··ini_file: | ||
| 160 | ····dest:·/etc/dnf/automatic.conf | ||
| 161 | ····section:·commands | ||
| 162 | ····option:·apply_updates | ||
| 163 | ····value:·'yes' | ||
| 164 | ····create:·true | ||
| 165 | ··tags: | ||
| 166 | ··-·NIST-800-53-CM-6(a) | ||
| 167 | ··-·NIST-800-53-SI-2(5) | ||
| 168 | ··-·NIST-800-53-SI-2(c) | ||
| 169 | ··-·dnf-automatic_apply_updates | ||
| 170 | ··-·low_complexity | ||
| 171 | ··-·medium_disruption | ||
| Max diff block lines reached; 230779/236351 bytes (97.64%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037d80:·3032·342d·3131·2d30·3 | 00037d80:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15105, 301 lines modified | Offset 15105, 301 lines modified | ||
| 0003b000:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b000:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b010:·6964·6d35·3334·3622·2074·6162·696e·6465··idm5346"·tabinde | 0003b010:·6964·6d35·3334·3622·2074·6162·696e·6465··idm5346"·tabinde | ||
| 0003b020:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b020:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b030:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b030:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b040:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b040:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b050:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b050:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b060:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b060:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b070:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b080:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b090:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b0a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b0b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b0c0:·3334·3622·3e3c·7072·653e·3c63·6f64·653e··346"><pre><code> | |||
| 0003b0d0:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | |||
| 0003b0e0:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | |||
| 0003b0f0:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | |||
| 0003b100:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | |||
| 0003b110:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | |||
| 0003b120:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | |||
| 0003b130:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | |||
| 0003b140:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | |||
| 0003b150:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b160:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | |||
| 0003b170:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | |||
| 0003b180:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | |||
| 0003b190:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | |||
| 0003b1a0:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | |||
| 0003b1b0:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003b1c0:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | |||
| 0003b1d0:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | |||
| 0003b1e0:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | |||
| 0003b1f0:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | |||
| 0003b200:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | |||
| 0003b210:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | |||
| 0003b220:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | |||
| 0003b230:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | |||
| 0003b240:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | |||
| 0003b250:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | |||
| 0003b260:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | |||
| 0003b270:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b280:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | |||
| 0003b290:·2922·0a0a·2020·2020·0a20·2020·2079·756d··)"..····.····yum | |||
| 0003b2a0:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | |||
| 0003b2b0:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | |||
| 0003b2c0:·7461·6c6c·0a20·2020·200a·6669·0a3c·2f63··tall.····.fi.</c | |||
| 0003b2d0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b2e0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b2f0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b300:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b310:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b320:·6964·6d35·3334·3722·2074·6162·696e·6465··idm5347"·tabinde | |||
| 0003b330:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b340:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b350:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b360:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b370:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b | 0003b380:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b | 0003b390:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003b | 0003b3a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b | 0003b3b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b | 0003b3c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b | 0003b3d0:·646d·3533·3437·223e·3c74·6162·6c65·2063··dm5347"><table·c | ||
| 0003b | 0003b3e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b | 0003b3f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b | 0003b400:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b | 0003b410:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b | 0003b420:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b | 0003b430:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003b | 0003b440:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003b450:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b460:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003b | 0003b470:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b | 0003b480:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b | 0003b490:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b | 0003b4a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b | 0003b4b0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003b | 0003b4c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b | 0003b4d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·2753··<code>-·name:·'S | ||
| 0003b | 0003b4e0:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003b | 0003b4f0:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003b | 0003b500:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | ||
| 0003b | 0003b510:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003b | 0003b520:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003b | 0003b530:·7374·616c·6c5f·636d·643a·2079·756d·2072··stall_cmd:·yum·r | ||
| 0003b | 0003b540:·6569·6e73·7461·6c6c·202d·790a·2020·7768··einstall·-y.··wh | ||
| 0003b | 0003b550:·656e·3a20·616e·7369·626c·655f·6469·7374··en:·ansible_dist | ||
| 0003b | 0003b560:·7269·6275·7469·6f6e·2069·6e20·5b20·2246··ribution·in·[·"F | ||
| 0003b | 0003b570:·6564·6f72·6122·2c20·2252·6564·4861·7422··edora",·"RedHat" | ||
| 0003b | 0003b580:·2c20·2243·656e·744f·5322·2c20·224f·7261··,·"CentOS",·"Ora | ||
| 0003b | 0003b590:·636c·654c·696e·7578·2220·5d0a·2020·7461··cleLinux"·].··ta | ||
| 0003b | 0003b5a0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003b | 0003b5b0:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003b | 0003b5c0:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003b | 0003b5d0:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b | 0003b5e0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b | 0003b5f0:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003b | 0003b600:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b | 0003b610:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003b | 0003b620:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003b | 0003b630:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b | 0003b640:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b | 0003b650:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003b | 0003b660:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003b | 0003b670:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003b | 0003b680:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003b | 0003b690:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003b | 0003b6a0:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003b | 0003b6b0:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003b | 0003b6c0:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003b | 0003b6d0:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003b | 0003b6e0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| Max diff block lines reached; 10104656/10145972 bytes (99.59%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:8 | 44 | ····*·cpe:/o:oracle:linux:8 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 96, 14 lines modified | Offset 96, 27 lines modified | ||
| 96 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 96 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 97 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 97 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 104 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 105 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 106 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 107 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 108 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 109 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 110 | fi | ||
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 108 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 116 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 109 | ··set_fact: | 117 | ··set_fact: |
| Offset 230, 27 lines modified | Offset 243, 14 lines modified | ||
| 230 | ··-·PCI-DSSv4-11.5.2 | 243 | ··-·PCI-DSSv4-11.5.2 |
| 231 | ··-·high_complexity | 244 | ··-·high_complexity |
| 232 | ··-·high_severity | 245 | ··-·high_severity |
| 233 | ··-·medium_disruption | 246 | ··-·medium_disruption |
| 234 | ··-·no_reboot_needed | 247 | ··-·no_reboot_needed |
| 235 | ··-·restrict_strategy | 248 | ··-·restrict_strategy |
| 236 | ··-·rpm_verify_hashes | 249 | ··-·rpm_verify_hashes |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 239 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 240 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 241 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 242 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 243 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 244 | fi | ||
| 245 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 250 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 246 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 251 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 247 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 252 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 248 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 253 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 249 | $·rpm·-qf·FILENAME | 254 | $·rpm·-qf·FILENAME |
| 250 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 255 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 271, 14 lines modified | Offset 271, 44 lines modified | ||
| 271 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 271 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 272 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 272 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 273 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 273 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 274 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 274 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 275 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 275 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 276 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 276 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 277 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 277 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 278 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 279 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 280 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 281 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 282 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 283 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 284 | declare·-A·SETPERMS_RPM_DICT | ||
| 285 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 286 | #·is·expected·by·the·RPM·database | ||
| 287 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 288 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 289 | do | ||
| 290 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 291 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 292 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 293 | ········do | ||
| 294 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 295 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 296 | ········done | ||
| 297 | done | ||
| 298 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 299 | #·correct·values | ||
| 300 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 301 | do | ||
| 302 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 303 | done | ||
| 278 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 304 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 279 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 305 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 280 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 306 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 281 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 307 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 282 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 308 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 283 | -·name:·Read·list·of·files·with·incorrect·permissions | 309 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 284 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 310 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 356, 44 lines modified | Offset 386, 14 lines modified | ||
| 356 | ··-·PCI-DSSv4-11.5.2 | 386 | ··-·PCI-DSSv4-11.5.2 |
| 357 | ··-·high_complexity | 387 | ··-·high_complexity |
| 358 | ··-·high_severity | 388 | ··-·high_severity |
| 359 | ··-·medium_disruption | 389 | ··-·medium_disruption |
| 360 | ··-·no_reboot_needed | 390 | ··-·no_reboot_needed |
| 361 | ··-·restrict_strategy | 391 | ··-·restrict_strategy |
| 362 | ··-·rpm_verify_permissions | 392 | ··-·rpm_verify_permissions |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 936356/944653 bytes (99.12%) of diff not shown. | |||
| Offset 14330, 15 lines modified | Offset 14330, 15 lines modified | ||
| 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038000:·3234·2d31·312d·303 | 00038000:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15098, 203 lines modified | Offset 15098, 203 lines modified | ||
| 0003af90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003af90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003afa0:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | 0003afa0:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | ||
| 0003afb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003afb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003afc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003afc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003afd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003afd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003afe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003afe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003aff0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003aff0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b000:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003b000:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | ||
| 0003b010:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b020:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b030:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b010:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b020:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b030:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b040:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b050:·643d·2269·646d·3536·3834·223e·3c74·6162··d="idm5684"><tab | |||
| 0003b060:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b070:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b080:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b090:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b0a0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b0b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b0c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b0d0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b0e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b0f0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b100:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b110:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b120:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b130:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b140:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b150:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b160:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b170:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b180:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b190:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b1a0:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b1b0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b1c0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b1d0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b1e0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b1f0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b200:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b210:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b220:·5341·2d53·5449·472d·4f4c·3038·2d30·302d··SA-STIG-OL08-00- | |||
| 0003b230:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003b240:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b250:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b260:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b270:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b280:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b290:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b2a0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b2b0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b2c0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b2d0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b2e0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b2f0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b300:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b310:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b320:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b | 0003b040:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b050:·3d22·6964·6d35·3638·3422·3e3c·7461·626c··="idm5684"><tabl | |||
| 0003b060:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b070:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b080:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b090:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b0a0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b0b0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b0c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b0d0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b0e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b0f0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b100:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b110:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b120:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b130:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b140:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b150:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b160:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b340:·2d74·6172·6765·743d·2223·6964·6d35·3638··-target="#idm568 | |||
| 0003b350:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | |||
| 0003b360:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b370:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b380:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b390:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b3a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3b0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b3c0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b3d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b3e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b3f0:·7365·2220·6964·3d22·6964·6d35·3638·3522··se"·id="idm5685" | |||
| 0003b400:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b410:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b420:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b430:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b440:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b450:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b460:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b470:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b480:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b490:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b4a0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b4b0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b4c0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b4d0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b4e0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b4f0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b | 0003b170:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | ||
| 0003b180:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b190:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| Max diff block lines reached; 9003277/9031069 bytes (99.69%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and |
| 51 | ··············Organizations·(NIST·800-171) | 51 | ··············Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:8 | 54 | ····*·cpe:/o:oracle:linux:8 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 63 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 108, 53 lines modified | Offset 108, 26 lines modified | ||
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 120 | -·name:·Ensure·aide·is·installed | ||
| 121 | ··package: | ||
| 122 | ····name:·aide | ||
| 123 | ····state:·present | ||
| 124 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 125 | ··tags: | ||
| 126 | ··-·CJIS-5.10.1.3 | ||
| 127 | ··-·DISA-STIG-OL08-00-010359 | ||
| 128 | ··-·NIST-800-53-CM-6(a) | ||
| 129 | ··-·PCI-DSS-Req-11.5 | ||
| 130 | ··-·PCI-DSSv4-11.5.2 | ||
| 131 | ··-·enable_strategy | ||
| 132 | ··-·low_complexity | ||
| 133 | ··-·low_disruption | ||
| 134 | ··-·medium_severity | ||
| 135 | ··-·no_reboot_needed | ||
| 136 | ··-·package_aide_installed | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | include·install_aide | 120 | include·install_aide |
| 143 | class·install_aide·{ | 121 | class·install_aide·{ |
| 144 | ··package·{·'aide': | 122 | ··package·{·'aide': |
| 145 | ····ensure·=>·'installed', | 123 | ····ensure·=>·'installed', |
| 146 | ··} | 124 | ··} |
| 147 | } | 125 | } |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | [[packages]] | ||
| 150 | name·=·"aide" | ||
| 151 | version·=·"*" | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | #·Remediation·is·applicable·only·in·certain·platforms | 131 | #·Remediation·is·applicable·only·in·certain·platforms |
| 158 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 132 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 162, 21 lines modified | Offset 135, 48 lines modified | ||
| 162 | if·!·rpm·-q·--quiet·"aide"·;·then | 135 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 163 | ····yum·install·-y·"aide" | 136 | ····yum·install·-y·"aide" |
| 164 | fi | 137 | fi |
| 165 | else | 138 | else |
| 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 167 | fi | 140 | fi |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | package·--add=aide | 150 | package·--add=aide |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | -·name:·Ensure·aide·is·installed | ||
| 157 | ··package: | ||
| 158 | ····name:·aide | ||
| 159 | ····state:·present | ||
| 160 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 161 | ··tags: | ||
| 162 | ··-·CJIS-5.10.1.3 | ||
| 163 | ··-·DISA-STIG-OL08-00-010359 | ||
| 164 | ··-·NIST-800-53-CM-6(a) | ||
| 165 | ··-·PCI-DSS-Req-11.5 | ||
| 166 | ··-·PCI-DSSv4-11.5.2 | ||
| 167 | ··-·enable_strategy | ||
| 168 | ··-·low_complexity | ||
| 169 | ··-·low_disruption | ||
| 170 | ··-·medium_severity | ||
| 171 | ··-·no_reboot_needed | ||
| 172 | ··-·package_aide_installed | ||
| 174 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 173 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 175 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 174 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 176 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 175 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 177 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 176 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 192, 14 lines modified | Offset 192, 27 lines modified | ||
| 192 | ············_\x8i_\x8s_\x8m······1446 | 192 | ············_\x8i_\x8s_\x8m······1446 |
| 193 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 193 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 194 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 194 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 195 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 195 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 196 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 196 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 197 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 197 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 198 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 198 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1117086/1123679 bytes (99.41%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037df0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | 00037df0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037e00:·2d30·3 | 00037e00:·2d30·3729·0a20·2020·2020·2020·2020·2020··-07).··········· | ||
| 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15142, 301 lines modified | Offset 15142, 301 lines modified | ||
| 0003b250:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b250:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b260:·6964·6d35·3334·3622·2074·6162·696e·6465··idm5346"·tabinde | 0003b260:·6964·6d35·3334·3622·2074·6162·696e·6465··idm5346"·tabinde | ||
| 0003b270:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b270:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b280:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b280:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b290:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b290:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b2a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b2a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b2b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b2b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b2c0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b2d0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b2e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b2f0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b300:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b310:·3334·3622·3e3c·7072·653e·3c63·6f64·653e··346"><pre><code> | |||
| 0003b320:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | |||
| 0003b330:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | |||
| 0003b340:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | |||
| 0003b350:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | |||
| 0003b360:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | |||
| 0003b370:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | |||
| 0003b380:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | |||
| 0003b390:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | |||
| 0003b3a0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b3b0:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | |||
| 0003b3c0:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | |||
| 0003b3d0:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | |||
| 0003b3e0:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | |||
| 0003b3f0:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | |||
| 0003b400:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003b410:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | |||
| 0003b420:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | |||
| 0003b430:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | |||
| 0003b440:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | |||
| 0003b450:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | |||
| 0003b460:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | |||
| 0003b470:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | |||
| 0003b480:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | |||
| 0003b490:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | |||
| 0003b4a0:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | |||
| 0003b4b0:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | |||
| 0003b4c0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b4d0:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | |||
| 0003b4e0:·2922·0a0a·2020·2020·0a20·2020·2079·756d··)"..····.····yum | |||
| 0003b4f0:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | |||
| 0003b500:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | |||
| 0003b510:·7461·6c6c·0a20·2020·200a·6669·0a3c·2f63··tall.····.fi.</c | |||
| 0003b520:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b530:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b540:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b550:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b560:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b570:·6964·6d35·3334·3722·2074·6162·696e·6465··idm5347"·tabinde | |||
| 0003b580:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b590:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b5a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b5b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b5c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b | 0003b5d0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b | 0003b5e0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003b | 0003b5f0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b | 0003b600:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b | 0003b610:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b | 0003b620:·646d·3533·3437·223e·3c74·6162·6c65·2063··dm5347"><table·c | ||
| 0003b | 0003b630:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b | 0003b640:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b | 0003b650:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b | 0003b660:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b | 0003b670:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b | 0003b680:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003b | 0003b690:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003b6a0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b6b0:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003b | 0003b6c0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b | 0003b6d0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b | 0003b6e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b | 0003b6f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b | 0003b700:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003b | 0003b710:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b | 0003b720:·3c63·6f64·653e·2d20·6e61·6d65·3a20·2753··<code>-·name:·'S | ||
| 0003b | 0003b730:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003b | 0003b740:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003b | 0003b750:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | ||
| 0003b | 0003b760:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003b | 0003b770:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003b | 0003b780:·7374·616c·6c5f·636d·643a·2079·756d·2072··stall_cmd:·yum·r | ||
| 0003b | 0003b790:·6569·6e73·7461·6c6c·202d·790a·2020·7768··einstall·-y.··wh | ||
| 0003b | 0003b7a0:·656e·3a20·616e·7369·626c·655f·6469·7374··en:·ansible_dist | ||
| 0003b | 0003b7b0:·7269·6275·7469·6f6e·2069·6e20·5b20·2246··ribution·in·[·"F | ||
| 0003b | 0003b7c0:·6564·6f72·6122·2c20·2252·6564·4861·7422··edora",·"RedHat" | ||
| 0003b | 0003b7d0:·2c20·2243·656e·744f·5322·2c20·224f·7261··,·"CentOS",·"Ora | ||
| 0003b | 0003b7e0:·636c·654c·696e·7578·2220·5d0a·2020·7461··cleLinux"·].··ta | ||
| 0003b | 0003b7f0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003b | 0003b800:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003b | 0003b810:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003b | 0003b820:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b | 0003b830:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b | 0003b840:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003b | 0003b850:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b | 0003b860:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003b | 0003b870:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003b | 0003b880:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b | 0003b890:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b | 0003b8a0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003b | 0003b8b0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003b | 0003b8c0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003b | 0003b8d0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003b | 0003b8e0:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003b | 0003b8f0:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003b | 0003b900:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003b | 0003b910:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003b | 0003b920:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003b | 0003b930:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| Max diff block lines reached; 6277406/6318722 bytes (99.35%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:oracle:linux:8 | 45 | ····*·cpe:/o:oracle:linux:8 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 103, 14 lines modified | Offset 103, 27 lines modified | ||
| 103 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 103 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 104 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 104 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 105 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 105 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 106 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 106 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 108 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 112 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 113 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 114 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 115 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 116 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 117 | fi | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 115 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 123 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 116 | ··set_fact: | 124 | ··set_fact: |
| Offset 237, 27 lines modified | Offset 250, 14 lines modified | ||
| 237 | ··-·PCI-DSSv4-11.5.2 | 250 | ··-·PCI-DSSv4-11.5.2 |
| 238 | ··-·high_complexity | 251 | ··-·high_complexity |
| 239 | ··-·high_severity | 252 | ··-·high_severity |
| 240 | ··-·medium_disruption | 253 | ··-·medium_disruption |
| 241 | ··-·no_reboot_needed | 254 | ··-·no_reboot_needed |
| 242 | ··-·restrict_strategy | 255 | ··-·restrict_strategy |
| 243 | ··-·rpm_verify_hashes | 256 | ··-·rpm_verify_hashes |
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 245 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 246 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 247 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 248 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 249 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 250 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 251 | fi | ||
| 252 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 257 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 253 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 258 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 254 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 259 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 255 | run·the·following·command·to·determine·which·package·owns·it: | 260 | run·the·following·command·to·determine·which·package·owns·it: |
| 256 | $·rpm·-qf·FILENAME | 261 | $·rpm·-qf·FILENAME |
| 257 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 262 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 258 | $·sudo·rpm·--setugids·PACKAGENAME | 263 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 276, 14 lines modified | Offset 276, 40 lines modified | ||
| 276 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 276 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 277 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 277 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 278 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 278 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 279 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 279 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 281 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 281 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 288 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 289 | declare·-A·SETPERMS_RPM_DICT | ||
| 290 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 291 | #·is·expected·by·the·RPM·database | ||
| 292 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 293 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 294 | do | ||
| 295 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 296 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 297 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 298 | done | ||
| 299 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 300 | #·correct·values | ||
| 301 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 302 | do | ||
| 303 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 304 | done | ||
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 306 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 307 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 308 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 309 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 288 | -·name:·Read·list·of·files·with·incorrect·ownership | 310 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 289 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 311 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 358, 40 lines modified | Offset 384, 14 lines modified | ||
| 358 | ··-·PCI-DSSv4-11.5.2 | 384 | ··-·PCI-DSSv4-11.5.2 |
| 359 | ··-·high_complexity | 385 | ··-·high_complexity |
| 360 | ··-·high_severity | 386 | ··-·high_severity |
| 361 | ··-·medium_disruption | 387 | ··-·medium_disruption |
| 362 | ··-·no_reboot_needed | 388 | ··-·no_reboot_needed |
| 363 | ··-·restrict_strategy | 389 | ··-·restrict_strategy |
| 364 | ··-·rpm_verify_ownership | 390 | ··-·rpm_verify_ownership |
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 370 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 679549/687438 bytes (98.85%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·3234·2d31·312d·303 | 00037f20:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15167, 301 lines modified | Offset 15167, 301 lines modified | ||
| 0003b3e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b3e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b3f0:·646d·3533·3436·2220·7461·6269·6e64·6578··dm5346"·tabindex | 0003b3f0:·646d·3533·3436·2220·7461·6269·6e64·6578··dm5346"·tabindex | ||
| 0003b400:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b400:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b410:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b410:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b420:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b420:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b430:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b430:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b440:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b440:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b450:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b460:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b470:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b480:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b490:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b4a0:·3436·223e·3c70·7265·3e3c·636f·6465·3e0a··46"><pre><code>. | |||
| 0003b4b0:·2320·4669·6e64·2077·6869·6368·2066·696c··#·Find·which·fil | |||
| 0003b4c0:·6573·2068·6176·6520·696e·636f·7272·6563··es·have·incorrec | |||
| 0003b4d0:·7420·6861·7368·2028·6e6f·7420·696e·202f··t·hash·(not·in·/ | |||
| 0003b4e0:·6574·632c·2062·6563·6175·7365·206f·6620··etc,·because·of· | |||
| 0003b4f0:·7468·6520·7379·7374·656d·2072·656c·6174··the·system·relat | |||
| 0003b500:·6564·2063·6f6e·6669·6720·6669·6c65·7329··ed·config·files) | |||
| 0003b510:·2061·6e64·2074·6865·6e20·6765·7420·6669···and·then·get·fi | |||
| 0003b520:·6c65·7320·6e61·6d65·730a·6669·6c65·735f··les·names.files_ | |||
| 0003b530:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003b540:·6173·683d·2224·2872·706d·202d·5661·202d··ash="$(rpm·-Va·- | |||
| 0003b550:·2d6e·6f63·6f6e·6669·6720·7c20·6772·6570··-noconfig·|·grep | |||
| 0003b560:·202d·4520·275e·2e2e·3527·207c·2061·776b···-E·'^..5'·|·awk | |||
| 0003b570:·2027·7b70·7269·6e74·2024·4e46·7d27·2029···'{print·$NF}'·) | |||
| 0003b580:·220a·0a69·6620·5b20·2d6e·2022·2466·696c··"..if·[·-n·"$fil | |||
| 0003b590:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b5a0:·745f·6861·7368·2220·5d3b·2074·6865·6e0a··t_hash"·];·then. | |||
| 0003b5b0:·2020·2020·2320·4672·6f6d·2066·696c·6573······#·From·files | |||
| 0003b5c0:·206e·616d·6573·2067·6574·2070·6163·6b61···names·get·packa | |||
| 0003b5d0:·6765·206e·616d·6573·2061·6e64·2063·6861··ge·names·and·cha | |||
| 0003b5e0:·6e67·6520·6e65·776c·696e·6520·746f·2073··nge·newline·to·s | |||
| 0003b5f0:·7061·6365·2c20·6265·6361·7573·6520·7270··pace,·because·rp | |||
| 0003b600:·6d20·7772·6974·6573·2065·6163·6820·7061··m·writes·each·pa | |||
| 0003b610:·636b·6167·6520·746f·206e·6577·206c·696e··ckage·to·new·lin | |||
| 0003b620:·650a·2020·2020·7061·636b·6167·6573·5f74··e.····packages_t | |||
| 0003b630:·6f5f·7265·696e·7374·616c·6c3d·2224·2872··o_reinstall="$(r | |||
| 0003b640:·706d·202d·7166·2024·6669·6c65·735f·7769··pm·-qf·$files_wi | |||
| 0003b650:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003b660:·6820·7c20·7472·2027·5c6e·2720·2720·2729··h·|·tr·'\n'·'·') | |||
| 0003b670:·220a·0a20·2020·200a·2020·2020·7975·6d20··"..····.····yum· | |||
| 0003b680:·7265·696e·7374·616c·6c20·2d79·2024·7061··reinstall·-y·$pa | |||
| 0003b690:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | |||
| 0003b6a0:·616c·6c0a·2020·2020·0a66·690a·3c2f·636f··all.····.fi.</co | |||
| 0003b6b0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b6c0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b6d0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b6e0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b6f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b700:·646d·3533·3437·2220·7461·6269·6e64·6578··dm5347"·tabindex | |||
| 0003b710:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b720:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b730:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b740:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b750:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b | 0003b760:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b | 0003b770:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003b | 0003b780:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003b790:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b7a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003b7b0:·6d35·3334·3722·3e3c·7461·626c·6520·636c··m5347"><table·cl | ||
| 0003b | 0003b7c0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b | 0003b7d0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b | 0003b7e0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b | 0003b7f0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b | 0003b800:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b | 0003b810:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003b | 0003b820:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003b830:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003b | 0003b840:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003b | 0003b850:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003b860:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b | 0003b870:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b | 0003b880:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b | 0003b890:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003b | 0003b8a0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b | 0003b8b0:·636f·6465·3e2d·206e·616d·653a·2027·5365··code>-·name:·'Se | ||
| 0003b | 0003b8c0:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003b | 0003b8d0:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003b | 0003b8e0:·6c20·636f·6d6d·616e·6427·0a20·2073·6574··l·command'.··set | ||
| 0003b | 0003b8f0:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | ||
| 0003b | 0003b900:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | ||
| 0003b | 0003b910:·7461·6c6c·5f63·6d64·3a20·7975·6d20·7265··tall_cmd:·yum·re | ||
| 0003b | 0003b920:·696e·7374·616c·6c20·2d79·0a20·2077·6865··install·-y.··whe | ||
| 0003b | 0003b930:·6e3a·2061·6e73·6962·6c65·5f64·6973·7472··n:·ansible_distr | ||
| 0003b | 0003b940:·6962·7574·696f·6e20·696e·205b·2022·4665··ibution·in·[·"Fe | ||
| 0003b | 0003b950:·646f·7261·222c·2022·5265·6448·6174·222c··dora",·"RedHat", | ||
| 0003b | 0003b960:·2022·4365·6e74·4f53·222c·2022·4f72·6163···"CentOS",·"Orac | ||
| 0003b | 0003b970:·6c65·4c69·6e75·7822·205d·0a20·2074·6167··leLinux"·].··tag | ||
| 0003b | 0003b980:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | ||
| 0003b | 0003b990:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b | 0003b9a0:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | ||
| 0003b | 0003b9b0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | ||
| 0003b | 0003b9c0:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b | 0003b9d0:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | ||
| 0003b | 0003b9e0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003b | 0003b9f0:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| 0003b | 0003ba00:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | ||
| 0003b | 0003ba10:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | ||
| 0003b | 0003ba20:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b | 0003ba30:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | ||
| 0003b | 0003ba40:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | ||
| 0003b | 0003ba50:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003b | 0003ba60:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | ||
| 0003b | 0003ba70:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | ||
| 0003b | 0003ba80:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | ||
| 0003b | 0003ba90:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | ||
| 0003b | 0003baa0:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 0003b | 0003bab0:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | ||
| 0003b | 0003bac0:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| Max diff block lines reached; 17110956/17152272 bytes (99.76%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:8 | 50 | ····*·cpe:/o:oracle:linux:8 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 109, 14 lines modified | Offset 109, 27 lines modified | ||
| 109 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 109 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 110 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 110 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 118 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 119 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 120 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 121 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 122 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 123 | fi | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 121 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 129 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 122 | ··set_fact: | 130 | ··set_fact: |
| Offset 243, 27 lines modified | Offset 256, 14 lines modified | ||
| 243 | ··-·PCI-DSSv4-11.5.2 | 256 | ··-·PCI-DSSv4-11.5.2 |
| 244 | ··-·high_complexity | 257 | ··-·high_complexity |
| 245 | ··-·high_severity | 258 | ··-·high_severity |
| 246 | ··-·medium_disruption | 259 | ··-·medium_disruption |
| 247 | ··-·no_reboot_needed | 260 | ··-·no_reboot_needed |
| 248 | ··-·restrict_strategy | 261 | ··-·restrict_strategy |
| 249 | ··-·rpm_verify_hashes | 262 | ··-·rpm_verify_hashes |
| 250 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 251 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 252 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 253 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 254 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 255 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 256 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 257 | fi | ||
| 258 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 263 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 259 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 264 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 260 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 265 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 261 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 266 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 262 | $·rpm·-qf·FILENAME | 267 | $·rpm·-qf·FILENAME |
| 263 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 268 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 284, 14 lines modified | Offset 284, 44 lines modified | ||
| 284 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 284 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 285 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 285 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 286 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 286 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 287 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 287 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 288 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 288 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 289 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 289 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 290 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 290 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 293 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 294 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 295 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 296 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 297 | declare·-A·SETPERMS_RPM_DICT | ||
| 298 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 299 | #·is·expected·by·the·RPM·database | ||
| 300 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 301 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 302 | do | ||
| 303 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 304 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 305 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 306 | ········do | ||
| 307 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 308 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 309 | ········done | ||
| 310 | done | ||
| 311 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 312 | #·correct·values | ||
| 313 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 314 | do | ||
| 315 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 316 | done | ||
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 292 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 318 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 293 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 319 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 294 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 320 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 295 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 321 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 296 | -·name:·Read·list·of·files·with·incorrect·permissions | 322 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 297 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 323 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 369, 44 lines modified | Offset 399, 14 lines modified | ||
| 369 | ··-·PCI-DSSv4-11.5.2 | 399 | ··-·PCI-DSSv4-11.5.2 |
| 370 | ··-·high_complexity | 400 | ··-·high_complexity |
| 371 | ··-·high_severity | 401 | ··-·high_severity |
| 372 | ··-·medium_disruption | 402 | ··-·medium_disruption |
| 373 | ··-·no_reboot_needed | 403 | ··-·no_reboot_needed |
| 374 | ··-·restrict_strategy | 404 | ··-·restrict_strategy |
| 375 | ··-·rpm_verify_permissions | 405 | ··-·rpm_verify_permissions |
| 376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 377 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 378 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1339594/1347866 bytes (99.39%) of diff not shown. | |||
| Offset 14305, 15 lines modified | Offset 14305, 15 lines modified | ||
| 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e70:·3234·2d31·312d·303 | 00037e70:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15073, 203 lines modified | Offset 15073, 203 lines modified | ||
| 0003ae00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ae00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ae10:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | 0003ae10:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | ||
| 0003ae20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ae20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ae30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ae30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ae40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ae40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ae50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ae50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ae60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ae60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003ae70:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003ae70:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | ||
| 0003ae80:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003ae90:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003aea0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003aeb0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003aec0:·643d·2269·646d·3536·3834·223e·3c74·6162··d="idm5684"><tab | |||
| 0003aed0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003aee0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003aef0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003af00:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003af10:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003af20:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003af30:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a | 0003ae80:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | ||
| 0003ae90:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003aea0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003aeb0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003aec0:·3d22·6964·6d35·3638·3422·3e3c·7461·626c··="idm5684"><tabl | |||
| 0003aed0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aee0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003aef0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003af00:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003af10:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003af20:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003af30:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003af40:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003af50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003af60:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003af70:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003af80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003af90:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003af | 0003afa0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003afb0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003afc0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003afd0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003af60:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003af70:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003af80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003af90:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003afa0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003afb0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003afc0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003afd0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003afe0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003aff0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b000:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b010:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b020:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b030:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b040:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b050:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b060:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b070:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b080:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b090:·5341·2d53·5449·472d·4f4c·3038·2d30·302d··SA-STIG-OL08-00- | |||
| 0003b0a0:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003b0b0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b0c0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b0d0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b0e0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b0f0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b100:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b110:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b120:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b130:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b140:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b150:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b160:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b170:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b180:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b190:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b1a0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b1b0:·2d74·6172·6765·743d·2223·6964·6d35·3638··-target="#idm568 | |||
| 0003b1c0:·3522·2074·6162·696e·6465·783d·2230·2220··5"·tabindex="0"· | |||
| 0003b1d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b1e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b1f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b200:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b210:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b220:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b230:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b240:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b250:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b260:·7365·2220·6964·3d22·6964·6d35·3638·3522··se"·id="idm5685" | |||
| 0003b270:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b280:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b290:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b2a0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b2b0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b2c0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b2d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b2e0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b2f0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b300:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b310:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b320:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b330:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b340:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b350:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b360:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003 | 0003afe0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | ||
| 0003aff0:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b000:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b010:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| Max diff block lines reached; 9003277/9031069 bytes (99.69%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 101, 53 lines modified | Offset 101, 26 lines modified | ||
| 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | -·name:·Ensure·aide·is·installed | ||
| 114 | ··package: | ||
| 115 | ····name:·aide | ||
| 116 | ····state:·present | ||
| 117 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 118 | ··tags: | ||
| 119 | ··-·CJIS-5.10.1.3 | ||
| 120 | ··-·DISA-STIG-OL08-00-010359 | ||
| 121 | ··-·NIST-800-53-CM-6(a) | ||
| 122 | ··-·PCI-DSS-Req-11.5 | ||
| 123 | ··-·PCI-DSSv4-11.5.2 | ||
| 124 | ··-·enable_strategy | ||
| 125 | ··-·low_complexity | ||
| 126 | ··-·low_disruption | ||
| 127 | ··-·medium_severity | ||
| 128 | ··-·no_reboot_needed | ||
| 129 | ··-·package_aide_installed | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | include·install_aide | 113 | include·install_aide |
| 136 | class·install_aide·{ | 114 | class·install_aide·{ |
| 137 | ··package·{·'aide': | 115 | ··package·{·'aide': |
| 138 | ····ensure·=>·'installed', | 116 | ····ensure·=>·'installed', |
| 139 | ··} | 117 | ··} |
| 140 | } | 118 | } |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | 124 | #·Remediation·is·applicable·only·in·certain·platforms |
| 151 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 125 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 155, 21 lines modified | Offset 128, 48 lines modified | ||
| 155 | if·!·rpm·-q·--quiet·"aide"·;·then | 128 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 156 | ····yum·install·-y·"aide" | 129 | ····yum·install·-y·"aide" |
| 157 | fi | 130 | fi |
| 158 | else | 131 | else |
| 159 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 132 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 160 | fi | 133 | fi |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | [[packages]] | ||
| 136 | name·=·"aide" | ||
| 137 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | package·--add=aide | 143 | package·--add=aide |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | -·name:·Ensure·aide·is·installed | ||
| 150 | ··package: | ||
| 151 | ····name:·aide | ||
| 152 | ····state:·present | ||
| 153 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 154 | ··tags: | ||
| 155 | ··-·CJIS-5.10.1.3 | ||
| 156 | ··-·DISA-STIG-OL08-00-010359 | ||
| 157 | ··-·NIST-800-53-CM-6(a) | ||
| 158 | ··-·PCI-DSS-Req-11.5 | ||
| 159 | ··-·PCI-DSSv4-11.5.2 | ||
| 160 | ··-·enable_strategy | ||
| 161 | ··-·low_complexity | ||
| 162 | ··-·low_disruption | ||
| 163 | ··-·medium_severity | ||
| 164 | ··-·no_reboot_needed | ||
| 165 | ··-·package_aide_installed | ||
| 167 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 166 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 168 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 167 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 169 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 168 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 170 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 169 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 185, 14 lines modified | Offset 185, 27 lines modified | ||
| 185 | ············_\x8i_\x8s_\x8m······1446 | 185 | ············_\x8i_\x8s_\x8m······1446 |
| 186 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 186 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 187 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 187 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 188 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 188 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 189 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 189 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 190 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 190 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 191 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 191 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1117084/1123724 bytes (99.41%) of diff not shown. | |||
| Offset 14296, 15 lines modified | Offset 14296, 15 lines modified | ||
| 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037de0:·6f66·2032·3032·342d·3131·2d30·3 | 00037de0:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15162, 301 lines modified | Offset 15162, 301 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3533·3436·2220·7461·6269·6e64·6578·3d22··5346"·tabindex=" | 0003b3a0:·3533·3436·2220·7461·6269·6e64·6578·3d22··5346"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b410:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b420:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b430:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b440:·7073·6522·2069·643d·2269·646d·3533·3436··pse"·id="idm5346 | |||
| 0003b450:·223e·3c70·7265·3e3c·636f·6465·3e0a·2320··"><pre><code>.#· | |||
| 0003b460:·4669·6e64·2077·6869·6368·2066·696c·6573··Find·which·files | |||
| 0003b470:·2068·6176·6520·696e·636f·7272·6563·7420···have·incorrect· | |||
| 0003b480:·6861·7368·2028·6e6f·7420·696e·202f·6574··hash·(not·in·/et | |||
| 0003b490:·632c·2062·6563·6175·7365·206f·6620·7468··c,·because·of·th | |||
| 0003b4a0:·6520·7379·7374·656d·2072·656c·6174·6564··e·system·related | |||
| 0003b4b0:·2063·6f6e·6669·6720·6669·6c65·7329·2061···config·files)·a | |||
| 0003b4c0:·6e64·2074·6865·6e20·6765·7420·6669·6c65··nd·then·get·file | |||
| 0003b4d0:·7320·6e61·6d65·730a·6669·6c65·735f·7769··s·names.files_wi | |||
| 0003b4e0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003b4f0:·683d·2224·2872·706d·202d·5661·202d·2d6e··h="$(rpm·-Va·--n | |||
| 0003b500:·6f63·6f6e·6669·6720·7c20·6772·6570·202d··oconfig·|·grep·- | |||
| 0003b510:·4520·275e·2e2e·3527·207c·2061·776b·2027··E·'^..5'·|·awk·' | |||
| 0003b520:·7b70·7269·6e74·2024·4e46·7d27·2029·220a··{print·$NF}'·)". | |||
| 0003b530:·0a69·6620·5b20·2d6e·2022·2466·696c·6573··.if·[·-n·"$files | |||
| 0003b540:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b550:·6861·7368·2220·5d3b·2074·6865·6e0a·2020··hash"·];·then.·· | |||
| 0003b560:·2020·2320·4672·6f6d·2066·696c·6573·206e····#·From·files·n | |||
| 0003b570:·616d·6573·2067·6574·2070·6163·6b61·6765··ames·get·package | |||
| 0003b580:·206e·616d·6573·2061·6e64·2063·6861·6e67···names·and·chang | |||
| 0003b590:·6520·6e65·776c·696e·6520·746f·2073·7061··e·newline·to·spa | |||
| 0003b5a0:·6365·2c20·6265·6361·7573·6520·7270·6d20··ce,·because·rpm· | |||
| 0003b5b0:·7772·6974·6573·2065·6163·6820·7061·636b··writes·each·pack | |||
| 0003b5c0:·6167·6520·746f·206e·6577·206c·696e·650a··age·to·new·line. | |||
| 0003b5d0:·2020·2020·7061·636b·6167·6573·5f74·6f5f······packages_to_ | |||
| 0003b5e0:·7265·696e·7374·616c·6c3d·2224·2872·706d··reinstall="$(rpm | |||
| 0003b5f0:·202d·7166·2024·6669·6c65·735f·7769·7468···-qf·$files_with | |||
| 0003b600:·5f69·6e63·6f72·7265·6374·5f68·6173·6820··_incorrect_hash· | |||
| 0003b610:·7c20·7472·2027·5c6e·2720·2720·2729·220a··|·tr·'\n'·'·')". | |||
| 0003b620:·0a20·2020·200a·2020·2020·7975·6d20·7265··.····.····yum·re | |||
| 0003b630:·696e·7374·616c·6c20·2d79·2024·7061·636b··install·-y·$pack | |||
| 0003b640:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | |||
| 0003b650:·6c0a·2020·2020·0a66·690a·3c2f·636f·6465··l.····.fi.</code | |||
| 0003b660:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b670:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b680:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b690:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b6a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b6b0:·3533·3437·2220·7461·6269·6e64·6578·3d22··5347"·tabindex=" | |||
| 0003b6c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b6d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b6e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b6f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b700:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b | 0003b710:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b | 0003b720:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b | 0003b730:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b740:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b750:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003b | 0003b760:·3334·3722·3e3c·7461·626c·6520·636c·6173··347"><table·clas | ||
| 0003b | 0003b770:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b780:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b790:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b7a0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003b7b0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003b7c0:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003b | 0003b7d0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b | 0003b7e0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003b | 0003b7f0:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003b | 0003b800:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b | 0003b810:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b | 0003b820:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003b830:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003b | 0003b840:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003b | 0003b850:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003b | 0003b860:·6465·3e2d·206e·616d·653a·2027·5365·7420··de>-·name:·'Set· | ||
| 0003b | 0003b870:·6661·6374·3a20·5061·636b·6167·6520·6d61··fact:·Package·ma | ||
| 0003b | 0003b880:·6e61·6765·7220·7265·696e·7374·616c·6c20··nager·reinstall· | ||
| 0003b | 0003b890:·636f·6d6d·616e·6427·0a20·2073·6574·5f66··command'.··set_f | ||
| 0003b | 0003b8a0:·6163·743a·0a20·2020·2070·6163·6b61·6765··act:.····package | ||
| 0003b | 0003b8b0:·5f6d·616e·6167·6572·5f72·6569·6e73·7461··_manager_reinsta | ||
| 0003b | 0003b8c0:·6c6c·5f63·6d64·3a20·7975·6d20·7265·696e··ll_cmd:·yum·rein | ||
| 0003b | 0003b8d0:·7374·616c·6c20·2d79·0a20·2077·6865·6e3a··stall·-y.··when: | ||
| 0003b | 0003b8e0:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | ||
| 0003b | 0003b8f0:·7574·696f·6e20·696e·205b·2022·4665·646f··ution·in·[·"Fedo | ||
| 0003b | 0003b900:·7261·222c·2022·5265·6448·6174·222c·2022··ra",·"RedHat",·" | ||
| 0003b | 0003b910:·4365·6e74·4f53·222c·2022·4f72·6163·6c65··CentOS",·"Oracle | ||
| 0003b | 0003b920:·4c69·6e75·7822·205d·0a20·2074·6167·733a··Linux"·].··tags: | ||
| 0003b | 0003b930:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003b | 0003b940:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b | 0003b950:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003b | 0003b960:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003b660:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b670:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | |||
| 0003b680:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | |||
| 0003b | 0003b970:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b980:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | |||
| 0003b990:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | |||
| 0003b9a0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b | 0003b9b0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003b | 0003b9c0:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003b | 0003b9d0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003b9e0:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003b | 0003b9f0:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003b | 0003ba00:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003b | 0003ba10:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003b | 0003ba20:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003b | 0003ba30:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003b | 0003ba40:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| Max diff block lines reached; 17027657/17068973 bytes (99.76%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·8 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·8 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:8 | 44 | ····*·cpe:/o:oracle:linux:8 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 106, 14 lines modified | Offset 106, 27 lines modified | ||
| 106 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 106 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 107 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 107 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 114 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 115 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 116 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 117 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 118 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 119 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 120 | fi | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 118 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 126 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 119 | ··set_fact: | 127 | ··set_fact: |
| Offset 240, 27 lines modified | Offset 253, 14 lines modified | ||
| 240 | ··-·PCI-DSSv4-11.5.2 | 253 | ··-·PCI-DSSv4-11.5.2 |
| 241 | ··-·high_complexity | 254 | ··-·high_complexity |
| 242 | ··-·high_severity | 255 | ··-·high_severity |
| 243 | ··-·medium_disruption | 256 | ··-·medium_disruption |
| 244 | ··-·no_reboot_needed | 257 | ··-·no_reboot_needed |
| 245 | ··-·restrict_strategy | 258 | ··-·restrict_strategy |
| 246 | ··-·rpm_verify_hashes | 259 | ··-·rpm_verify_hashes |
| 247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 248 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 249 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 250 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 251 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 252 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 253 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 254 | fi | ||
| 255 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 260 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 256 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 261 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 257 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 262 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 258 | run·the·following·command·to·determine·which·package·owns·it: | 263 | run·the·following·command·to·determine·which·package·owns·it: |
| 259 | $·rpm·-qf·FILENAME | 264 | $·rpm·-qf·FILENAME |
| 260 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 265 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 261 | $·sudo·rpm·--setugids·PACKAGENAME | 266 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 279, 14 lines modified | Offset 279, 40 lines modified | ||
| 279 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 279 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 280 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 280 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 283 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 283 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 284 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 284 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 285 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 285 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 287 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 288 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 289 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 290 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 291 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 292 | declare·-A·SETPERMS_RPM_DICT | ||
| 293 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 294 | #·is·expected·by·the·RPM·database | ||
| 295 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 296 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 297 | do | ||
| 298 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 299 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 300 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 301 | done | ||
| 302 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 303 | #·correct·values | ||
| 304 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 305 | do | ||
| 306 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 307 | done | ||
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 287 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 288 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 289 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 290 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 291 | -·name:·Read·list·of·files·with·incorrect·ownership | 313 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 292 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 314 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 361, 40 lines modified | Offset 387, 14 lines modified | ||
| 361 | ··-·PCI-DSSv4-11.5.2 | 387 | ··-·PCI-DSSv4-11.5.2 |
| 362 | ··-·high_complexity | 388 | ··-·high_complexity |
| 363 | ··-·high_severity | 389 | ··-·high_severity |
| 364 | ··-·medium_disruption | 390 | ··-·medium_disruption |
| 365 | ··-·no_reboot_needed | 391 | ··-·no_reboot_needed |
| 366 | ··-·restrict_strategy | 392 | ··-·restrict_strategy |
| 367 | ··-·rpm_verify_ownership | 393 | ··-·rpm_verify_ownership |
| 368 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 369 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 370 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 371 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 372 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 373 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1614346/1622105 bytes (99.52%) of diff not shown. | |||
| Offset 14286, 15 lines modified | Offset 14286, 15 lines modified | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d40:·2d31·312d·303 | 00037d40:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15091, 301 lines modified | Offset 15091, 301 lines modified | ||
| 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af30:·2223·6964·6d35·3334·3622·2074·6162·696e··"#idm5346"·tabin | 0003af30:·2223·6964·6d35·3334·3622·2074·6162·696e··"#idm5346"·tabin | ||
| 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003af90:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003afa0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003afb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003afc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003afd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003afe0:·6d35·3334·3622·3e3c·7072·653e·3c63·6f64··m5346"><pre><cod | |||
| 0003aff0:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003b000:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003b010:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003b020:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003b030:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003b040:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003b050:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003b060:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003b070:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b080:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003b090:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003b0a0:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003b0b0:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003b0c0:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003b0d0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b0e0:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003b0f0:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003b100:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003b110:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003b120:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003b130:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003b140:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003b150:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003b160:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003b170:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003b180:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003b190:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b1a0:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003b1b0:·2027·2922·0a0a·2020·2020·0a20·2020·2079···')"..····.····y | |||
| 0003b1c0:·756d·2072·6569·6e73·7461·6c6c·202d·7920··um·reinstall·-y· | |||
| 0003b1d0:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003b1e0:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003b1f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b200:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b210:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b220:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b230:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b240:·2223·6964·6d35·3334·3722·2074·6162·696e··"#idm5347"·tabin | |||
| 0003b250:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b260:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b270:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b280:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b290:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003 | 0003b2a0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003 | 0003b2b0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003 | 0003b2c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003 | 0003b2d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003 | 0003b2e0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003 | 0003b2f0:·2269·646d·3533·3437·223e·3c74·6162·6c65··"idm5347"><table | ||
| 0003 | 0003b300:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b310:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b320:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b330:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b340:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b350:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003b360:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003b370:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003b380:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003b390:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003b3a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003b3b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b3c0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003b3d0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b | 0003b3e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b | 0003b3f0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b | 0003b400:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b | 0003b410:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b | 0003b420:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b | 0003b430:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b | 0003b440:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b | 0003b450:·696e·7374·616c·6c5f·636d·643a·2079·756d··install_cmd:·yum | ||
| 0003b | 0003b460:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b | 0003b470:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003b | 0003b480:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b | 0003b490:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b | 0003b4a0:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b | 0003b4b0:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b | 0003b4c0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b | 0003b4d0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b | 0003b4e0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b | 0003b4f0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003b500:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b | 0003b510:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b | 0003b520:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b | 0003b530:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b | 0003b540:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b | 0003b550:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003b560:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b | 0003b570:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b | 0003b580:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b | 0003b590:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b | 0003b5a0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b | 0003b5b0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b | 0003b5c0:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b | 0003b5d0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b | 0003b5e0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b | 0003b5f0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003b | 0003b600:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| Max diff block lines reached; 10579385/10604969 bytes (99.76%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·8 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·8 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:8 | 42 | ····*·cpe:/o:oracle:linux:8 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 93, 14 lines modified | Offset 93, 27 lines modified | ||
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 101 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 102 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 103 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 104 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 105 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 106 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 107 | fi | ||
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 105 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 113 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 106 | ··set_fact: | 114 | ··set_fact: |
| Offset 227, 27 lines modified | Offset 240, 14 lines modified | ||
| 227 | ··-·PCI-DSSv4-11.5.2 | 240 | ··-·PCI-DSSv4-11.5.2 |
| 228 | ··-·high_complexity | 241 | ··-·high_complexity |
| 229 | ··-·high_severity | 242 | ··-·high_severity |
| 230 | ··-·medium_disruption | 243 | ··-·medium_disruption |
| 231 | ··-·no_reboot_needed | 244 | ··-·no_reboot_needed |
| 232 | ··-·restrict_strategy | 245 | ··-·restrict_strategy |
| 233 | ··-·rpm_verify_hashes | 246 | ··-·rpm_verify_hashes |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 236 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 237 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 238 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 239 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 240 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 241 | fi | ||
| 242 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 247 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 243 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 248 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 244 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 249 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 245 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 250 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 246 | $·rpm·-qf·FILENAME | 251 | $·rpm·-qf·FILENAME |
| 247 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 252 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 268, 14 lines modified | Offset 268, 44 lines modified | ||
| 268 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 268 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 269 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 269 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 270 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 270 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 274 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 274 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 280 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 281 | declare·-A·SETPERMS_RPM_DICT | ||
| 282 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 283 | #·is·expected·by·the·RPM·database | ||
| 284 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 285 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 286 | do | ||
| 287 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 288 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 289 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 290 | ········do | ||
| 291 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 292 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 293 | ········done | ||
| 294 | done | ||
| 295 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 296 | #·correct·values | ||
| 297 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 298 | do | ||
| 299 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 300 | done | ||
| 275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 280 | -·name:·Read·list·of·files·with·incorrect·permissions | 306 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 281 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 307 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 353, 44 lines modified | Offset 383, 14 lines modified | ||
| 353 | ··-·PCI-DSSv4-11.5.2 | 383 | ··-·PCI-DSSv4-11.5.2 |
| 354 | ··-·high_complexity | 384 | ··-·high_complexity |
| 355 | ··-·high_severity | 385 | ··-·high_severity |
| 356 | ··-·medium_disruption | 386 | ··-·medium_disruption |
| 357 | ··-·no_reboot_needed | 387 | ··-·no_reboot_needed |
| 358 | ··-·restrict_strategy | 388 | ··-·restrict_strategy |
| 359 | ··-·rpm_verify_permissions | 389 | ··-·rpm_verify_permissions |
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 361 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 362 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 856850/865016 bytes (99.06%) of diff not shown. | |||
| Offset 14279, 15 lines modified | Offset 14279, 15 lines modified | ||
| 00037c60:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037c60:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037c70:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037c70:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037c80:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037c80:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037c90:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037c90:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037ca0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037ca0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037cc0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | 00037cc0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037cd0:·2d30·3 | 00037cd0:·2d30·3729·0a20·2020·2020·2020·2020·2020··-07).··········· | ||
| 00037ce0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037ce0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037cf0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037cf0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037d00:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037d00:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037d10:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037d10:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037d20:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037d20:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037d30:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037d30:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037d40:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037d40:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15076, 203 lines modified | Offset 15076, 203 lines modified | ||
| 0003ae30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ae30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ae40:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | 0003ae40:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | ||
| 0003ae50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ae50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ae60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ae60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ae70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ae70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ae80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ae80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ae90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ae90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003aea0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003aea0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | ||
| 0003aeb0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003aec0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003aed0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003aee0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003aef0:·6964·6d35·3638·3422·3e3c·7461·626c·6520··idm5684"><table· | |||
| 0003af00:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003af10:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003af20:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003af30:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003af40:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003af50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003af60:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003af70:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003aeb0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003aec0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003aed0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003aee0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003aef0:·2269·646d·3536·3834·223e·3c74·6162·6c65··"idm5684"><table | |||
| 0003af00:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003af10:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003af20:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003af30:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003af40:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003af50:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003af60:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003af70:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003af80:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003af90:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003afa0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003afb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003afc0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003af | 0003af80:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003af90:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003afe0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003aff0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b000:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b010:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b020:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b030:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b040:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b050:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b060:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b070:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b080:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b090:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b0a0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b0b0:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b0c0:·2d53·5449·472d·4f4c·3038·2d30·302d·3031··-STIG-OL08-00-01 | |||
| 0003b0d0:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003b0e0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b0f0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b100:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b110:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b120:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b130:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b140:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b150:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b160:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b170:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b180:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b190:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b1a0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b1b0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b1c0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b1d0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b1e0:·6172·6765·743d·2223·6964·6d35·3638·3522··arget="#idm5685" | |||
| 0003b1f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b200:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b210:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b220:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b230:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b240:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b250:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b260:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b270:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b280:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b290:·2220·6964·3d22·6964·6d35·3638·3522·3e3c··"·id="idm5685">< | |||
| 0003b2a0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b2b0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b2c0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b2d0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b2e0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b2f0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b300:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b310:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b320:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b330:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b340:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b350:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b360:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003 | 0003afa0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003afb0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003afc0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003afd0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003afe0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003aff0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b000:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b010:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b020:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b030:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b040:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b380:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b390:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| Max diff block lines reached; 28037936/28065728 bytes (99.90%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037dd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037de0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037de0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037df0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037df0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e00:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e00:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e10:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e10:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e20:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e20:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e30:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e30:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e40:·3032·342d·3131·2d30·3 | 00037e40:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 00037e50:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e50:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e60:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e60:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e70:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e70:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e80:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e80:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037e90:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037e90:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037ea0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037ea0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037eb0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037eb0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15095, 202 lines modified | Offset 15095, 202 lines modified | ||
| 0003af60:·6574·3d22·2369·646d·3536·3834·2220·7461··et="#idm5684"·ta | 0003af60:·6574·3d22·2369·646d·3536·3834·2220·7461··et="#idm5684"·ta | ||
| 0003af70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003af70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003af80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003af80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003af90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003af90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003afa0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003afa0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003afb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003afb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003afc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003afc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003afd0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003afe0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003aff0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003afd0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003afe0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003aff0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b000:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b010:·6964·3d22·6964·6d35·3638·3422·3e3c·7461··id="idm5684"><ta | |||
| 0003b020:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b030:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b040:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b050:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b060:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b070:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b080:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b090:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b0a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b0b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b0c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b0d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b0e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b0f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b100:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b110:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b120:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b130:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b140:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b150:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b160:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b170:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b180:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b190:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b1a0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b1b0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b1c0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b1d0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b1e0:·4953·412d·5354·4947·2d4f·4c30·382d·3030··ISA-STIG-OL08-00 | |||
| 0003b1f0:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003b200:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b210:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b220:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b230:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b240:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b250:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b260:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b270:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b280:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b290:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b2a0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b2b0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b2c0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b2d0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b2e0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b | 0003b000:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b010:·643d·2269·646d·3536·3834·223e·3c74·6162··d="idm5684"><tab | |||
| 0003b020:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b030:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b040:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b050:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b060:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b070:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b080:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b090:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b0a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b0b0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b300:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | |||
| 0003b310:·3835·2220·7461·6269·6e64·6578·3d22·3022··85"·tabindex="0" | |||
| 0003b320:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b330:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b340:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b350:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b360:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b370:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b380:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b390:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b3a0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b3b0:·7073·6522·2069·643d·2269·646d·3536·3835··pse"·id="idm5685 | |||
| 0003b3c0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b3d0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b3e0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b3f0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b400:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b410:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b420:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b430:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b440:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b450:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b460:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b470:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b480:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b | 0003b0c0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b4a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b | 0003b0d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b0e0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b0f0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b100:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b110:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b120:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b | 0003b130:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | ||
| 0003b140:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b150:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b160:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b4d0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b4e0:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| Max diff block lines reached; 28006136/28033790 bytes (99.90%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037dd0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037de0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037de0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037df0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037df0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037e00:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037e00:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e10:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e10:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e20:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e20:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e40:·6173·206f·6620·3230·3234·2d31·312d·303 | 00037e40:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00037e50:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e50:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e60:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e60:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e70:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e70:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e80:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e80:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e90:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e90:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037ea0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037ea0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037eb0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037eb0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15037, 200 lines modified | Offset 15037, 200 lines modified | ||
| 0003abc0:·6172·6765·743d·2223·6964·6d35·3232·3222··arget="#idm5222" | 0003abc0:·6172·6765·743d·2223·6964·6d35·3232·3222··arget="#idm5222" | ||
| 0003abd0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003abd0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003abe0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003abe0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003abf0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003abf0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003ac00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003ac00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003ac10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003ac10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003ac20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003ac20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003ac30:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003ac40:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ac50:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ac60:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ac70:·2220·6964·3d22·6964·6d35·3232·3222·3e3c··"·id="idm5222">< | |||
| 0003ac80:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003ac90:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003ac30:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003ac40:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ac50:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ac60:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ac70:·6522·2069·643d·2269·646d·3532·3232·223e··e"·id="idm5222"> | |||
| 0003ac80:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ac90:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003aca0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ac | 0003aca0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003acb0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003acc0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003acd0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003ace0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003acf0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003acc0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003acd0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003ace0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003acf0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ad00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ad10:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003ad20:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003ad30:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ad40:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003ad50:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003ad60:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003ad70:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003ad80:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003ad90:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003ada0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003adb0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003adc0:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003add0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003ade0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003adf0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003ae00:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003ae10:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003ae20:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003ae30:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003ae40:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003ae50:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003ae60:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003ae70:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003ae80:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003ae90:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003aea0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003aeb0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003aec0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003aed0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003aee0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003aef0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003af00:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003af10:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003af20:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003af30:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003af40:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003af50:·2369·646d·3532·3233·2220·7461·6269·6e64··#idm5223"·tabind | |||
| 0003af60:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003af70:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003af80:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003af90:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003afa0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003afb0:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003afc0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003afd0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003afe0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aff0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b000:·646d·3532·3233·223e·3c74·6162·6c65·2063··dm5223"><table·c | |||
| 0003b010:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b020:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b030:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b040:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b050:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003 | 0003ad00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b070:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003 | 0003ad10:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003ad20:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003 | 0003ad30:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b0a0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b0b0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b0c0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003 | 0003ad40:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003ad50:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003ad60:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003ad70:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003ad80:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003ad90:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003ada0:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003adb0:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003adc0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003add0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003ade0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003adf0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003ae00:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003ae10:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003ae20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003ae30:·3532·3233·2220·7461·6269·6e64·6578·3d22··5223"·tabindex=" | |||
| 0003ae40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| Max diff block lines reached; 20437552/20464930 bytes (99.87%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 113, 52 lines modified | Offset 113, 26 lines modified | ||
| 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | -·name:·Ensure·aide·is·installed | ||
| 126 | ··package: | ||
| 127 | ····name:·aide | ||
| 128 | ····state:·present | ||
| 129 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 130 | ··tags: | ||
| 131 | ··-·CJIS-5.10.1.3 | ||
| 132 | ··-·NIST-800-53-CM-6(a) | ||
| 133 | ··-·PCI-DSS-Req-11.5 | ||
| 134 | ··-·PCI-DSSv4-11.5.2 | ||
| 135 | ··-·enable_strategy | ||
| 136 | ··-·low_complexity | ||
| 137 | ··-·low_disruption | ||
| 138 | ··-·medium_severity | ||
| 139 | ··-·no_reboot_needed | ||
| 140 | ··-·package_aide_installed | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 146 | include·install_aide | 125 | include·install_aide |
| 147 | class·install_aide·{ | 126 | class·install_aide·{ |
| 148 | ··package·{·'aide': | 127 | ··package·{·'aide': |
| 149 | ····ensure·=>·'installed', | 128 | ····ensure·=>·'installed', |
| 150 | ··} | 129 | ··} |
| 151 | } | 130 | } |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 136 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 166, 21 lines modified | Offset 140, 47 lines modified | ||
| 166 | if·!·rpm·-q·--quiet·"aide"·;·then | 140 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 167 | ····yum·install·-y·"aide" | 141 | ····yum·install·-y·"aide" |
| 168 | fi | 142 | fi |
| 169 | else | 143 | else |
| 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 144 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 171 | fi | 145 | fi |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | package·--add=aide | 155 | package·--add=aide |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | -·name:·Ensure·aide·is·installed | ||
| 162 | ··package: | ||
| 163 | ····name:·aide | ||
| 164 | ····state:·present | ||
| 165 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 166 | ··tags: | ||
| 167 | ··-·CJIS-5.10.1.3 | ||
| 168 | ··-·NIST-800-53-CM-6(a) | ||
| 169 | ··-·PCI-DSS-Req-11.5 | ||
| 170 | ··-·PCI-DSSv4-11.5.2 | ||
| 171 | ··-·enable_strategy | ||
| 172 | ··-·low_complexity | ||
| 173 | ··-·low_disruption | ||
| 174 | ··-·medium_severity | ||
| 175 | ··-·no_reboot_needed | ||
| 176 | ··-·package_aide_installed | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 178 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/sbin/aide·--init | 179 | $·sudo·/usr/sbin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 181 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 182 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 183 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 203, 14 lines modified | Offset 203, 28 lines modified | ||
| 203 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 203 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 204 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 204 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 206 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 206 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 207 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 207 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 208 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 208 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 209 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 209 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 211 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 212 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| Max diff block lines reached; 1824693/1830600 bytes (99.68%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037dc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037dd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037dd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037de0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037de0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037df0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037df0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e30:·6173·206f·6620·3230·3234·2d31·312d·303 | 00037e30:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00037e40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037ea0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037ea0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15042, 201 lines modified | Offset 15042, 201 lines modified | ||
| 0003ac10:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | 0003ac10:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | ||
| 0003ac20:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | 0003ac20:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | ||
| 0003ac30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ac30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ac40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ac40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ac50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ac50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ac60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ac60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ac70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ac70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ac80:·6174·696f·6e20· | 0003ac80:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | ||
| 0003ac90:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003aca0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003acb0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003acc0:·7073·6522·2069·643d·2269·646d·3532·3232··pse"·id="idm5222 | |||
| 0003acd0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ace0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003acf0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003ad00:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003ad10:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ad20:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ad30:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ad40:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ad50:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ad60:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ad70:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ad80:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003ad90:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ada0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003adb0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003adc0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003add0:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003ade0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003adf0:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003ae00:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003ae10:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003ae20:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003ae30:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ae40:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ae50:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ae60:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ae70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ae80:·6964·6d35·3232·3322·2074·6162·696e·6465··idm5223"·tabinde | |||
| 0003ae90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003aea0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003aeb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003aec0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003aed0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003aee0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003a | 0003aef0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003a | 0003af00:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003a | 0003af10:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003a | 0003af20:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003a | 0003af30:·3232·3322·3e3c·7461·626c·6520·636c·6173··223"><table·clas | ||
| 0003a | 0003af40:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003a | 0003af50:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003a | 0003af60:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003a | 0003af70:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003a | 0003af80:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003a | 0003af90:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003a | 0003afa0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003a | 0003afb0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003a | 0003afc0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003a | 0003afd0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003a | 0003afe0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003a | 0003aff0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003 | 0003b000:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003 | 0003b010:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003 | 0003b020:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 0003add0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003ade0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003adf0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003ae00:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003ae10:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003ae20:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003ae30:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003ae40:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003ae50:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003ae60:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003ae70:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003ae80:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003ae90:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003aea0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003aeb0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003aec0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003aed0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003aee0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003aef0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003af00:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003af10:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003af20:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003af30:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003 | 0003b030:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 0003b040:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b050:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b060:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b070:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b080:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b090:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b0a0:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003b0b0:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003b0c0:·6465·2220·3b20·7468·656e·0a20·2020·2079··de"·;·then.····y | |||
| 0003b0d0:·756d·2069·6e73·7461·6c6c·202d·7920·2261··um·install·-y·"a | |||
| 0003b0e0:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003b0f0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003b100:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003b110:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003b120:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003b130:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003b140:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b150:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b160:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b170:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b180:·2d74·6172·6765·743d·2223·6964·6d35·3232··-target="#idm522 | |||
| Max diff block lines reached; 20726543/20754059 bytes (99.87%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037de0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037df0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037df0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037e00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037e00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037e10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037e10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e50:·6173·206f·6620·3230·3234·2d31·312d·303 | 00037e50:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00037e60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037ea0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037ea0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037eb0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037eb0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037ec0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037ec0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15028, 200 lines modified | Offset 15028, 200 lines modified | ||
| 0003ab30:·7461·7267·6574·3d22·2369·646d·3532·3232··target="#idm5222 | 0003ab30:·7461·7267·6574·3d22·2369·646d·3532·3232··target="#idm5222 | ||
| 0003ab40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ab40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ab50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ab50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ab60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ab60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ab70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ab70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ab80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ab80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ab90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ab90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003aba0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003abb0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003abc0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003abd0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003abe0:·6522·2069·643d·2269·646d·3532·3232·223e··e"·id="idm5222"> | |||
| 0003abf0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ac00:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003aba0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003abb0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003abc0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003abd0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003abe0:·7365·2220·6964·3d22·6964·6d35·3232·3222··se"·id="idm5222" | |||
| 0003abf0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003ac00:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ac10:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ac | 0003ac10:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003ac30:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ac | 0003ac20:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003ac30:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ac40:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003ac50:· | 0003ac50:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003ac60:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ac60:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ac70:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ac80:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003ac90:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003aca0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003acb0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003acc0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003acd0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003ace0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003acf0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003ad00:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003ad10:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003ad20:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003ad30:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003ad40:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003ad50:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003ad60:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003ad70:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003ad80:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003ad90:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003ada0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003adb0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003adc0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003add0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003ade0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003adf0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003ae00:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003ae10:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003ae20:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003ae30:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003ae40:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003ae50:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003ae60:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003ae70:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ae80:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ae90:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003aea0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003aeb0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003aec0:·2223·6964·6d35·3232·3322·2074·6162·696e··"#idm5223"·tabin | |||
| 0003aed0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003aee0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003aef0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003af00:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003af10:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003af20:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003af30:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003af40:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003af50:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003af60:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003af70:·6964·6d35·3232·3322·3e3c·7461·626c·6520··idm5223"><table· | |||
| 0003af80:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003af90:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003afa0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003afb0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003afc0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003a | 0003ac70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003a | 0003ac80:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003a | 0003ac90:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003 | 0003aca0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003 | 0003acb0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003 | 0003acc0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003b030:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003 | 0003acd0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003ace0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003acf0:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003ad00:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003ad10:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003ad20:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003ad30:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003ad40:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003ad50:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003ad60:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003ad70:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ad80:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003ad90:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003ada0:·6d35·3232·3322·2074·6162·696e·6465·783d··m5223"·tabindex= | |||
| 0003adb0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003adc0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003add0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003ade0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003adf0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003ae00:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| Max diff block lines reached; 8759212/8786590 bytes (99.69%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 52 lines modified | Offset 111, 26 lines modified | ||
| 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | -·name:·Ensure·aide·is·installed | ||
| 124 | ··package: | ||
| 125 | ····name:·aide | ||
| 126 | ····state:·present | ||
| 127 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 128 | ··tags: | ||
| 129 | ··-·CJIS-5.10.1.3 | ||
| 130 | ··-·NIST-800-53-CM-6(a) | ||
| 131 | ··-·PCI-DSS-Req-11.5 | ||
| 132 | ··-·PCI-DSSv4-11.5.2 | ||
| 133 | ··-·enable_strategy | ||
| 134 | ··-·low_complexity | ||
| 135 | ··-·low_disruption | ||
| 136 | ··-·medium_severity | ||
| 137 | ··-·no_reboot_needed | ||
| 138 | ··-·package_aide_installed | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | include·install_aide | 123 | include·install_aide |
| 145 | class·install_aide·{ | 124 | class·install_aide·{ |
| 146 | ··package·{·'aide': | 125 | ··package·{·'aide': |
| 147 | ····ensure·=>·'installed', | 126 | ····ensure·=>·'installed', |
| 148 | ··} | 127 | ··} |
| 149 | } | 128 | } |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | #·Remediation·is·applicable·only·in·certain·platforms | 134 | #·Remediation·is·applicable·only·in·certain·platforms |
| 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 135 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 164, 21 lines modified | Offset 138, 47 lines modified | ||
| 164 | if·!·rpm·-q·--quiet·"aide"·;·then | 138 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 165 | ····yum·install·-y·"aide" | 139 | ····yum·install·-y·"aide" |
| 166 | fi | 140 | fi |
| 167 | else | 141 | else |
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 142 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169 | fi | 143 | fi |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | [[packages]] | ||
| 146 | name·=·"aide" | ||
| 147 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | package·--add=aide | 153 | package·--add=aide |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | -·name:·Ensure·aide·is·installed | ||
| 160 | ··package: | ||
| 161 | ····name:·aide | ||
| 162 | ····state:·present | ||
| 163 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 164 | ··tags: | ||
| 165 | ··-·CJIS-5.10.1.3 | ||
| 166 | ··-·NIST-800-53-CM-6(a) | ||
| 167 | ··-·PCI-DSS-Req-11.5 | ||
| 168 | ··-·PCI-DSSv4-11.5.2 | ||
| 169 | ··-·enable_strategy | ||
| 170 | ··-·low_complexity | ||
| 171 | ··-·low_disruption | ||
| 172 | ··-·medium_severity | ||
| 173 | ··-·no_reboot_needed | ||
| 174 | ··-·package_aide_installed | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 176 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·/usr/sbin/aide·--init | 177 | $·sudo·/usr/sbin/aide·--init |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 179 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 181 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 180 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 182 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 181 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 201, 14 lines modified | Offset 201, 28 lines modified | ||
| 201 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 201 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 202 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 202 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 203 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 203 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 204 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 204 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 205 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 205 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 206 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 206 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 207 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 207 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 209 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 210 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| Max diff block lines reached; 962942/968968 bytes (99.38%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037dd0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037de0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037de0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037df0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037df0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037e00:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037e00:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037e10:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037e10:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037e20:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037e20:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e30:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e30:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e40:·6620·3230·3234·2d31·312d·303 | 00037e40:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e50:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e60:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e60:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e70:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e70:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e80:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e80:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e90:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e90:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037ea0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037ea0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037eb0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037eb0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 14718, 182 lines modified | Offset 14718, 182 lines modified | ||
| 000397d0:·6574·3d22·2369·646d·3834·3339·2220·7461··et="#idm8439"·ta | 000397d0:·6574·3d22·2369·646d·3834·3339·2220·7461··et="#idm8439"·ta | ||
| 000397e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 000397e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 000397f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 000397f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00039800:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00039800:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 00039810:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 00039810:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 00039820:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 00039820:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 00039830:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 00039830:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 00039840:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 00039850:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00039860:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00039870:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00039880:·6964·3d22·6964·6d38·3433·3922·3e3c·7461··id="idm8439"><ta | |||
| 00039890:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 000398a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 000398b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 000398c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 000398d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 000398e0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 000398f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039 | 00039840:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | ||
| 00039850:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00039860:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00039870:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00039880:·643d·2269·646d·3834·3339·223e·3c74·6162··d="idm8439"><tab | |||
| 00039890:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 000398a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 000398b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 000398c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 000398d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 000398e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 000398f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00039900:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00039910:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039920:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00039930:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00039940:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00039950:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 000399 | 00039960:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 00039970:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00039980:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 00039920:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00039930:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00039940:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039950:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00039960:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00039970:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00039980:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 00039990:· | 00039990:·616c·6c5f·646e·662d·6175·746f·6d61·7469··all_dnf-automati | ||
| 000399a0:·6320·6973·2069·6e73·7461·6c6c·6564·0a20··c·is·installed.· | |||
| 000399 | 000399a0:·630a·0a63·6c61·7373·2069·6e73·7461·6c6c··c..class·install | ||
| 000399b0:·5f64·6e66·2d61·7574·6f6d·6174·6963·207b··_dnf-automatic·{ | |||
| 000399c0:·0a20·2070·6163·6b61·6765·207b·2027·646e··.··package·{·'dn | |||
| 000399d0:·662d·6175·746f·6d61·7469·6327·3a0a·2020··f-automatic':.·· | |||
| 000399e0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 000399f0:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 00039a00:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 00039a10:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00039a20:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00039a30:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00039a40:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00039a50:·6574·3d22·2369·646d·3834·3430·2220·7461··et="#idm8440"·ta | |||
| 00039a60:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00039a70:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00039a80:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00039a90:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00039aa0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00039ab0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00039ac0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 00039ad0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00039ae0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00039af0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00039b00:·2269·646d·3834·3430·223e·3c74·6162·6c65··"idm8440"><table | |||
| 00039b10:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00039b20:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00039b30:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00039b40:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00039b50:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00039b60:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039b70:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00039b80:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00039b90:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00039ba0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00039bb0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 00039bc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 00039bd0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 00039be0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 00039bf0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 00039c00:·653e·0a69·6620·2120·7270·6d20·2d71·202d··e>.if·!·rpm·-q·- | |||
| 00039c10:·2d71·7569·6574·2022·646e·662d·6175·746f··-quiet·"dnf-auto | |||
| 00039c20:·6d61·7469·6322·203b·2074·6865·6e0a·2020··matic"·;·then.·· | |||
| 00039c30:·2020·7975·6d20·696e·7374·616c·6c20·2d79····yum·install·-y | |||
| 00039 | 00039c40:·2022·646e·662d·6175·746f·6d61·7469·6322···"dnf-automatic" | ||
| 000399d0:·630a·2020·2020·7374·6174·653a·2070·7265··c.····state:·pre | |||
| 000399e0:·7365·6e74·0a20·2074·6167·733a·0a20·202d··sent.··tags:.··- | |||
| 000399f0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 00039a00:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 00039a10:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 00039a20:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 00039a30:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 00039a40:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 00039a50:·2020·2d20·7061·636b·6167·655f·646e·662d····-·package_dnf- | |||
| 00039a60:·6175·746f·6d61·7469·635f·696e·7374·616c··automatic_instal | |||
| 00039 | 00039c50:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | ||
| 00039 | 00039c60:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 00039 | 00039c70:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 00039 | 00039c80:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 00039 | 00039c90:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 00039ac0:·7267·6574·3d22·2369·646d·3834·3430·2220··rget="#idm8440"· | |||
| 00039ad0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 00039ae0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00039af0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| Max diff block lines reached; 3401150/3426044 bytes (99.27%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 80, 63 lines modified | Offset 80, 63 lines modified | ||
| 80 | $·sudo·yum·install·dnf-automatic | 80 | $·sudo·yum·install·dnf-automatic |
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 92 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 93 | ··package: | ||
| 94 | ····name:·dnf-automatic | ||
| 95 | ····state:·present | ||
| 96 | ··tags: | ||
| 97 | ··-·enable_strategy | ||
| 98 | ··-·low_complexity | ||
| 99 | ··-·low_disruption | ||
| 100 | ··-·medium_severity | ||
| 101 | ··-·no_reboot_needed | ||
| 102 | ··-·package_dnf-automatic_installed | ||
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 108 | include·install_dnf-automatic | 92 | include·install_dnf-automatic |
| 109 | class·install_dnf-automatic·{ | 93 | class·install_dnf-automatic·{ |
| 110 | ··package·{·'dnf-automatic': | 94 | ··package·{·'dnf-automatic': |
| 111 | ····ensure·=>·'installed', | 95 | ····ensure·=>·'installed', |
| 112 | ··} | 96 | ··} |
| 113 | } | 97 | } |
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | [[packages]] | ||
| 116 | name·=·"dnf-automatic" | ||
| 117 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 103 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 124 | ····yum·install·-y·"dnf-automatic" | 104 | ····yum·install·-y·"dnf-automatic" |
| 125 | fi | 105 | fi |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 107 | [[packages]] | ||
| 108 | name·=·"dnf-automatic" | ||
| 109 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | package·--add=dnf-automatic | 115 | package·--add=dnf-automatic |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 122 | ··package: | ||
| 123 | ····name:·dnf-automatic | ||
| 124 | ····state:·present | ||
| 125 | ··tags: | ||
| 126 | ··-·enable_strategy | ||
| 127 | ··-·low_complexity | ||
| 128 | ··-·low_disruption | ||
| 129 | ··-·medium_severity | ||
| 130 | ··-·no_reboot_needed | ||
| 131 | ··-·package_dnf-automatic_installed | ||
| 132 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 132 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 133 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 133 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 134 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 134 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 135 | automatic.conf. | 135 | automatic.conf. |
| 136 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 136 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 137 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 137 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 138 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 138 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 268, 14 lines modified | Offset 268, 42 lines modified | ||
| 268 | ···························(a),·CM-11(b) | 268 | ···························(a),·CM-11(b) |
| 269 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 269 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 270 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 270 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 271 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 271 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 272 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 272 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 273 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 273 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 274 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3 | 274 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3 |
| 275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 276 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 277 | if·rpm·--quiet·-q·yum;·then | ||
| 278 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 279 | #·adding·any·search·characters·to·the·config·file. | ||
| 280 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 281 | #·shellcheck·disable=SC2059 | ||
| 282 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 283 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 284 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 285 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 286 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 287 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 288 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 289 | yum.conf" | ||
| 290 | else | ||
| Max diff block lines reached; 211967/218114 bytes (97.18%) of diff not shown. | |||
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037fa0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fb0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fb0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fc0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fc0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fd0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fd0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fe0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fe0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ff0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ff0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038000:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038000:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038010:·3234·2d31·312d·303 | 00038010:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00038020:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038020:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038030:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038030:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038040:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038040:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038050:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038050:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038060:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038060:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038070:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038070:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038080:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038080:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15041, 192 lines modified | Offset 15041, 192 lines modified | ||
| 0003ac00:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003ac00:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003ac10:·2369·646d·3537·3130·2220·7461·6269·6e64··#idm5710"·tabind | 0003ac10:·2369·646d·3537·3130·2220·7461·6269·6e64··#idm5710"·tabind | ||
| 0003ac20:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003ac20:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003ac30:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003ac30:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003ac40:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003ac40:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003ac50:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003ac50:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003ac60:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003ac60:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003ac70:·5265·6d65·6469·6174·696f·6e20· | 0003ac70:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003ac80:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003ac90:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003aca0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003acb0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003acc0:·3537·3130·223e·3c70·7265·3e3c·636f·6465··5710"><pre><code | |||
| 0003acd0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003ace0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003acf0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003ad00:·7466·6f72·6d73·0a69·6620·2820·5b20·2120··tforms.if·(·[·!· | |||
| 0003ad10:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003ad20:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003ad30:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003ad40:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003ad50:·703b·2021·2028·205b·2022·247b·636f·6e74··p;·!·(·[·"${cont | |||
| 0003ad60:·6169·6e65·723a·2d7d·2220·3d3d·2022·6277··ainer:-}"·==·"bw | |||
| 0003ad70:·7261·702d·6f73·6275·696c·6422·205d·2029··rap-osbuild"·]·) | |||
| 0003ad80:·2029·3b20·7468·656e·0a0a·6669·7073·2d6d···);·then..fips-m | |||
| 0003ad90:·6f64·652d·7365·7475·7020·2d2d·656e·6162··ode-setup·--enab | |||
| 0003ada0:·6c65·0a46·4950·535f·434f·4e46·3d22·2f65··le.FIPS_CONF="/e | |||
| 0003adb0:·7463·2f64·7261·6375·742e·636f·6e66·2e64··tc/dracut.conf.d | |||
| 0003adc0:·2f34·302d·6669·7073·2e63·6f6e·6622·0a69··/40-fips.conf".i | |||
| 0003add0:·6620·2120·6772·6570·2022·5e61·6464·5f64··f·!·grep·"^add_d | |||
| 0003ade0:·7261·6375·746d·6f64·756c·6573·2b3d·5c22··racutmodules+=\" | |||
| 0003adf0:·2066·6970·7320·5c22·2220·2446·4950·535f···fips·\""·$FIPS_ | |||
| 0003ae00:·434f·4e46·3b20·7468·656e·0a20·2020·2065··CONF;·then.····e | |||
| 0003ae10:·6368·6f20·2261·6464·5f64·7261·6375·746d··cho·"add_dracutm | |||
| 0003ae20:·6f64·756c·6573·2b3d·5c22·2066·6970·7320··odules+=\"·fips· | |||
| 0003ae30:·5c22·2220·2667·743b·2667·743b·2024·4649··\""·>>·$FI | |||
| 0003ae40:·5053·5f43·4f4e·460a·6669·0a0a·656c·7365··PS_CONF.fi..else | |||
| 0003ae50:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003ae60:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003ae70:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003ae80:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003ae90:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003aea0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003aeb0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003aec0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003aed0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003aee0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003aef0:·3537·3131·2220·7461·6269·6e64·6578·3d22··5711"·tabindex=" | |||
| 0003af00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003af10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003af20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003af30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003af40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003af50:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003a | 0003af60:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003a | 0003af70:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003a | 0003af80:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003a | 0003af90:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003a | 0003afa0:·3731·3122·3e3c·7461·626c·6520·636c·6173··711"><table·clas | ||
| 0003a | 0003afb0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003a | 0003afc0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003a | 0003afd0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003a | 0003afe0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003a | 0003aff0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003ad20:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | |||
| 0003ad30:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ad40:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003 | 0003b000:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003 | 0003b010:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b020:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0003b030:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0003b040:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b050:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0003b060:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003 | 0003b070:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b080:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003ad80:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ad90:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003ada0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003 | 0003b090:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003 | 0003b0a0:·6f64·653e·2d20·6e61·6d65·3a20·4368·6563··ode>-·name:·Chec | ||
| 0003 | 0003b0b0:·6b20·746f·2073·6565·2074·6865·2063·7572··k·to·see·the·cur | ||
| 0003 | 0003b0c0:·7265·6e74·2073·7461·7475·7320·6f66·2046··rent·status·of·F | ||
| 0003b0d0:·4950·5320·6d6f·6465·0a20·2063·6f6d·6d61··IPS·mode.··comma | |||
| 0003b0e0:·6e64·3a20·2f75·7372·2f62·696e·2f66·6970··nd:·/usr/bin/fip | |||
| 0003b0f0:·732d·6d6f·6465·2d73·6574·7570·202d·2d63··s-mode-setup·--c | |||
| 0003b100:·6865·636b·0a20·2072·6567·6973·7465·723a··heck.··register: | |||
| 0003b110:·2069·735f·6669·7073·5f65·6e61·626c·6564···is_fips_enabled | |||
| 0003b120:·0a20·2063·6861·6e67·6564·5f77·6865·6e3a··.··changed_when: | |||
| 0003b130:·2066·616c·7365·0a20·2066·6169·6c65·645f···false.··failed_ | |||
| 0003b140:·7768·656e·3a20·6661·6c73·650a·2020·7768··when:·false.··wh | |||
| 0003b150:·656e·3a20·2820·616e·7369·626c·655f·7669··en:·(·ansible_vi | |||
| 0003b160:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b170:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b180:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b190:·767a·222c·2022·706f·646d·616e·222c·0a20··vz",·"podman",.· | |||
| 0003b1a0:·2020·2022·636f·6e74·6169·6e65·7222·5d20·····"container"]· | |||
| 0003b1b0:·616e·6420·6e6f·7420·2820·6c6f·6f6b·7570··and·not·(·lookup | |||
| 0003b1c0:·2822·656e·7622·2c20·2263·6f6e·7461·696e··("env",·"contain | |||
| 0003b1d0:·6572·2229·203d·3d20·2262·7772·6170·2d6f··er")·==·"bwrap-o | |||
| 0003b1e0:·7362·7569·6c64·2220·2920·290a·2020·7461··sbuild"·)·).··ta | |||
| 0003b1f0:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 0003b200:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b210:·4e49·5354·2d38·3030·2d35·332d·4941·2d37··NIST-800-53-IA-7 | |||
| 0003b220:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b230:·2d53·432d·3132·0a20·202d·204e·4953·542d··-SC-12.··-·NIST- | |||
| 0003b240:·3830·302d·3533·2d53·432d·3132·2832·290a··800-53-SC-12(2). | |||
| 0003b250:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b260:·5343·2d31·3228·3329·0a20·202d·204e·4953··SC-12(3).··-·NIS | |||
| 0003b270:·542d·3830·302d·3533·2d53·432d·3133·0a20··T-800-53-SC-13.· | |||
| 0003b280:·202d·2065·6e61·626c·655f·6472·6163·7574···-·enable_dracut | |||
| Max diff block lines reached; 4615051/4641325 bytes (99.43%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information |
| 51 | ··············Systems·and·Organizations·(NIST·800-171) | 51 | ··············Systems·and·Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:9 | 54 | ····*·cpe:/o:oracle:linux:9 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 97, 14 lines modified | Offset 97, 27 lines modified | ||
| 97 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module | 97 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module |
| 98 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 98 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 99 | ············_\x8i_\x8s_\x8m······1446 | 99 | ············_\x8i_\x8s_\x8m······1446 |
| 100 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 100 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 101 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 101 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 102 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 102 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 106 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 107 | fips-mode-setup·--enable | ||
| 108 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 109 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 110 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 111 | fi | ||
| 112 | else | ||
| 113 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 114 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 120 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 110 | ··command:·/usr/bin/fips-mode-setup·--check | 121 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 162, 27 lines modified | Offset 175, 14 lines modified | ||
| 162 | ··-·NIST-800-53-SC-13 | 175 | ··-·NIST-800-53-SC-13 |
| 163 | ··-·enable_dracut_fips_module | 176 | ··-·enable_dracut_fips_module |
| 164 | ··-·high_severity | 177 | ··-·high_severity |
| 165 | ··-·medium_complexity | 178 | ··-·medium_complexity |
| 166 | ··-·medium_disruption | 179 | ··-·medium_disruption |
| 167 | ··-·reboot_required | 180 | ··-·reboot_required |
| 168 | ··-·restrict_strategy | 181 | ··-·restrict_strategy |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 171 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 172 | fips-mode-setup·--enable | ||
| 173 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 174 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 175 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 176 | fi | ||
| 177 | else | ||
| 178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 179 | fi | ||
| 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 181 | To·enable·FIPS·mode,·run·the·following·command: | 183 | To·enable·FIPS·mode,·run·the·following·command: |
| 182 | fips-mode-setup·--enable | 184 | fips-mode-setup·--enable |
| 183 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 185 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 184 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 186 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 185 | ····*·Creating·/etc/system-fips | 187 | ····*·Creating·/etc/system-fips |
| Offset 195, 14 lines modified | Offset 195, 45 lines modified | ||
| 195 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 195 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 196 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 196 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 197 | ············_\x8i_\x8s_\x8m······1446 | 197 | ············_\x8i_\x8s_\x8m······1446 |
| 198 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 198 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 199 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 199 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 200 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 200 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 201 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 201 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 203 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 204 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 205 | var_system_crypto_policy='FIPS:OSPP' | ||
| 206 | fips-mode-setup·--enable | ||
| 207 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 208 | rc=$? | ||
| 209 | if·test·"$rc"·=·127;·then | ||
| 210 | » echo·"$stderr_of_call"·>&2 | ||
| 211 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 212 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 213 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 214 | » false··#·end·with·an·error·code | ||
| 215 | elif·test·"$rc"·!=·0;·then | ||
| 216 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 217 | » false··#·end·with·an·error·code | ||
| 218 | fi | ||
| 219 | else | ||
| 220 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 221 | fi | ||
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 223 | [customizations] | ||
| 224 | fips·=·true | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 207 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 230 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 208 | ··set_fact: | 231 | ··set_fact: |
| Offset 298, 45 lines modified | Offset 329, 14 lines modified | ||
| 298 | ··-·NIST-800-53-SC-13 | 329 | ··-·NIST-800-53-SC-13 |
| 299 | ··-·enable_fips_mode | 330 | ··-·enable_fips_mode |
| 300 | ··-·high_severity | 331 | ··-·high_severity |
| 301 | ··-·medium_complexity | 332 | ··-·medium_complexity |
| 302 | ··-·medium_disruption | 333 | ··-·medium_disruption |
| 303 | ··-·reboot_required | 334 | ··-·reboot_required |
| 304 | ··-·restrict_strategy | 335 | ··-·restrict_strategy |
| 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 563916/570974 bytes (98.76%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d80:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037d90:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037d90:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037da0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037da0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037db0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037db0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dc0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dc0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037de0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | 00037de0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037df0:·2d30·3 | 00037df0:·2d30·3729·0a20·2020·2020·2020·2020·2020··-07).··········· | ||
| 00037e00:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e00:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e10:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e10:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e20:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e20:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e30:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e30:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e40:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e40:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e50:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e50:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e60:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e60:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15136, 301 lines modified | Offset 15136, 301 lines modified | ||
| 0003b1f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b1f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b200:·6d34·3838·3622·2074·6162·696e·6465·783d··m4886"·tabindex= | 0003b200:·6d34·3838·3622·2074·6162·696e·6465·783d··m4886"·tabindex= | ||
| 0003b210:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b210:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b220:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b220:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b230:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b230:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b240:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b240:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b250:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b250:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b260:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b270:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b280:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b290:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b2a0:·6170·7365·2220·6964·3d22·6964·6d34·3838··apse"·id="idm488 | |||
| 0003b2b0:·3622·3e3c·7072·653e·3c63·6f64·653e·0a23··6"><pre><code>.# | |||
| 0003b2c0:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | |||
| 0003b2d0:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | |||
| 0003b2e0:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | |||
| 0003b2f0:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | |||
| 0003b300:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | |||
| 0003b310:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | |||
| 0003b320:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | |||
| 0003b330:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | |||
| 0003b340:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b350:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | |||
| 0003b360:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | |||
| 0003b370:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | |||
| 0003b380:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | |||
| 0003b390:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | |||
| 0003b3a0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003b3b0:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | |||
| 0003b3c0:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | |||
| 0003b3d0:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | |||
| 0003b3e0:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | |||
| 0003b3f0:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | |||
| 0003b400:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | |||
| 0003b410:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | |||
| 0003b420:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | |||
| 0003b430:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | |||
| 0003b440:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | |||
| 0003b450:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | |||
| 0003b460:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003b470:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | |||
| 0003b480:·0a0a·2020·2020·0a20·2020·2079·756d·2072··..····.····yum·r | |||
| 0003b490:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | |||
| 0003b4a0:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003b4b0:·6c6c·0a20·2020·200a·6669·0a3c·2f63·6f64··ll.····.fi.</cod | |||
| 0003b4c0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b4d0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b4e0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b4f0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b500:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b510:·6d34·3838·3722·2074·6162·696e·6465·783d··m4887"·tabindex= | |||
| 0003b520:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b530:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b540:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b550:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b560:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b | 0003b570:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b | 0003b580:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b | 0003b590:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b | 0003b5a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003b5b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003b5c0:·3438·3837·223e·3c74·6162·6c65·2063·6c61··4887"><table·cla | ||
| 0003b | 0003b5d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003b5e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003b5f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003b600:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003b610:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003b620:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b | 0003b630:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003b640:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b | 0003b650:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b | 0003b660:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003b670:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003b680:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003b690:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b | 0003b6a0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b | 0003b6b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b | 0003b6c0:·6f64·653e·2d20·6e61·6d65·3a20·2753·6574··ode>-·name:·'Set | ||
| 0003b | 0003b6d0:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| 0003b | 0003b6e0:·616e·6167·6572·2072·6569·6e73·7461·6c6c··anager·reinstall | ||
| 0003b | 0003b6f0:·2063·6f6d·6d61·6e64·270a·2020·7365·745f···command'.··set_ | ||
| 0003b | 0003b700:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003b | 0003b710:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003b | 0003b720:·616c·6c5f·636d·643a·2079·756d·2072·6569··all_cmd:·yum·rei | ||
| 0003b | 0003b730:·6e73·7461·6c6c·202d·790a·2020·7768·656e··nstall·-y.··when | ||
| 0003b | 0003b740:·3a20·616e·7369·626c·655f·6469·7374·7269··:·ansible_distri | ||
| 0003b | 0003b750:·6275·7469·6f6e·2069·6e20·5b20·2246·6564··bution·in·[·"Fed | ||
| 0003b | 0003b760:·6f72·6122·2c20·2252·6564·4861·7422·2c20··ora",·"RedHat",· | ||
| 0003b | 0003b770:·2243·656e·744f·5322·2c20·224f·7261·636c··"CentOS",·"Oracl | ||
| 0003b | 0003b780:·654c·696e·7578·2220·5d0a·2020·7461·6773··eLinux"·].··tags | ||
| 0003b | 0003b790:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | ||
| 0003b | 0003b7a0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b | 0003b7b0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003b | 0003b7c0:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003b | 0003b7d0:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003b | 0003b7e0:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003b | 0003b7f0:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003b | 0003b800:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b | 0003b810:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003b | 0003b820:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003b | 0003b830:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b | 0003b840:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003b | 0003b850:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003b | 0003b860:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003b | 0003b870:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003b | 0003b880:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003b | 0003b890:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003b | 0003b8a0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003b | 0003b8b0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003b | 0003b8c0:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| 0003b | 0003b8d0:·6f74·5f6e·6565·6465·640a·2020·2d20·7265··ot_needed.··-·re | ||
| Max diff block lines reached; 6093795/6135111 bytes (99.33%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:9 | 44 | ····*·cpe:/o:oracle:linux:9 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 101, 14 lines modified | Offset 101, 27 lines modified | ||
| 101 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 101 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 110 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 111 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 112 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 113 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 114 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 115 | fi | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 113 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 121 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 114 | ··set_fact: | 122 | ··set_fact: |
| Offset 235, 27 lines modified | Offset 248, 14 lines modified | ||
| 235 | ··-·PCI-DSSv4-11.5.2 | 248 | ··-·PCI-DSSv4-11.5.2 |
| 236 | ··-·high_complexity | 249 | ··-·high_complexity |
| 237 | ··-·high_severity | 250 | ··-·high_severity |
| 238 | ··-·medium_disruption | 251 | ··-·medium_disruption |
| 239 | ··-·no_reboot_needed | 252 | ··-·no_reboot_needed |
| 240 | ··-·restrict_strategy | 253 | ··-·restrict_strategy |
| 241 | ··-·rpm_verify_hashes | 254 | ··-·rpm_verify_hashes |
| 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 243 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 244 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 245 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 246 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 247 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 248 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 249 | fi | ||
| 250 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 255 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 251 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 256 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 252 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 257 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 253 | run·the·following·command·to·determine·which·package·owns·it: | 258 | run·the·following·command·to·determine·which·package·owns·it: |
| 254 | $·rpm·-qf·FILENAME | 259 | $·rpm·-qf·FILENAME |
| 255 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 260 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 256 | $·sudo·rpm·--setugids·PACKAGENAME | 261 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 274, 14 lines modified | Offset 274, 40 lines modified | ||
| 274 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 274 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 275 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 275 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 276 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 276 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 277 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 277 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 278 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 278 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 279 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 279 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 286 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 287 | declare·-A·SETPERMS_RPM_DICT | ||
| 288 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 289 | #·is·expected·by·the·RPM·database | ||
| 290 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 291 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 292 | do | ||
| 293 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 294 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 295 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 296 | done | ||
| 297 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 298 | #·correct·values | ||
| 299 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 300 | do | ||
| 301 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 302 | done | ||
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 303 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 304 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 305 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 306 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 307 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 286 | -·name:·Read·list·of·files·with·incorrect·ownership | 308 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 287 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 309 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 356, 40 lines modified | Offset 382, 14 lines modified | ||
| 356 | ··-·PCI-DSSv4-11.5.2 | 382 | ··-·PCI-DSSv4-11.5.2 |
| 357 | ··-·high_complexity | 383 | ··-·high_complexity |
| 358 | ··-·high_severity | 384 | ··-·high_severity |
| 359 | ··-·medium_disruption | 385 | ··-·medium_disruption |
| 360 | ··-·no_reboot_needed | 386 | ··-·no_reboot_needed |
| 361 | ··-·restrict_strategy | 387 | ··-·restrict_strategy |
| 362 | ··-·rpm_verify_ownership | 388 | ··-·rpm_verify_ownership |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 368 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 655468/663349 bytes (98.81%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·3234·2d31·312d·303 | 00037f20:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15162, 301 lines modified | Offset 15162, 301 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3438·3836·2220·7461·6269·6e64·6578·3d22··4886"·tabindex=" | 0003b3a0:·3438·3836·2220·7461·6269·6e64·6578·3d22··4886"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b410:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b420:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b430:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b440:·7073·6522·2069·643d·2269·646d·3438·3836··pse"·id="idm4886 | |||
| 0003b450:·223e·3c70·7265·3e3c·636f·6465·3e0a·2320··"><pre><code>.#· | |||
| 0003b460:·4669·6e64·2077·6869·6368·2066·696c·6573··Find·which·files | |||
| 0003b470:·2068·6176·6520·696e·636f·7272·6563·7420···have·incorrect· | |||
| 0003b480:·6861·7368·2028·6e6f·7420·696e·202f·6574··hash·(not·in·/et | |||
| 0003b490:·632c·2062·6563·6175·7365·206f·6620·7468··c,·because·of·th | |||
| 0003b4a0:·6520·7379·7374·656d·2072·656c·6174·6564··e·system·related | |||
| 0003b4b0:·2063·6f6e·6669·6720·6669·6c65·7329·2061···config·files)·a | |||
| 0003b4c0:·6e64·2074·6865·6e20·6765·7420·6669·6c65··nd·then·get·file | |||
| 0003b4d0:·7320·6e61·6d65·730a·6669·6c65·735f·7769··s·names.files_wi | |||
| 0003b4e0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003b4f0:·683d·2224·2872·706d·202d·5661·202d·2d6e··h="$(rpm·-Va·--n | |||
| 0003b500:·6f63·6f6e·6669·6720·7c20·6772·6570·202d··oconfig·|·grep·- | |||
| 0003b510:·4520·275e·2e2e·3527·207c·2061·776b·2027··E·'^..5'·|·awk·' | |||
| 0003b520:·7b70·7269·6e74·2024·4e46·7d27·2029·220a··{print·$NF}'·)". | |||
| 0003b530:·0a69·6620·5b20·2d6e·2022·2466·696c·6573··.if·[·-n·"$files | |||
| 0003b540:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b550:·6861·7368·2220·5d3b·2074·6865·6e0a·2020··hash"·];·then.·· | |||
| 0003b560:·2020·2320·4672·6f6d·2066·696c·6573·206e····#·From·files·n | |||
| 0003b570:·616d·6573·2067·6574·2070·6163·6b61·6765··ames·get·package | |||
| 0003b580:·206e·616d·6573·2061·6e64·2063·6861·6e67···names·and·chang | |||
| 0003b590:·6520·6e65·776c·696e·6520·746f·2073·7061··e·newline·to·spa | |||
| 0003b5a0:·6365·2c20·6265·6361·7573·6520·7270·6d20··ce,·because·rpm· | |||
| 0003b5b0:·7772·6974·6573·2065·6163·6820·7061·636b··writes·each·pack | |||
| 0003b5c0:·6167·6520·746f·206e·6577·206c·696e·650a··age·to·new·line. | |||
| 0003b5d0:·2020·2020·7061·636b·6167·6573·5f74·6f5f······packages_to_ | |||
| 0003b5e0:·7265·696e·7374·616c·6c3d·2224·2872·706d··reinstall="$(rpm | |||
| 0003b5f0:·202d·7166·2024·6669·6c65·735f·7769·7468···-qf·$files_with | |||
| 0003b600:·5f69·6e63·6f72·7265·6374·5f68·6173·6820··_incorrect_hash· | |||
| 0003b610:·7c20·7472·2027·5c6e·2720·2720·2729·220a··|·tr·'\n'·'·')". | |||
| 0003b620:·0a20·2020·200a·2020·2020·7975·6d20·7265··.····.····yum·re | |||
| 0003b630:·696e·7374·616c·6c20·2d79·2024·7061·636b··install·-y·$pack | |||
| 0003b640:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | |||
| 0003b650:·6c0a·2020·2020·0a66·690a·3c2f·636f·6465··l.····.fi.</code | |||
| 0003b660:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b670:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b680:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b690:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b6a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b6b0:·3438·3837·2220·7461·6269·6e64·6578·3d22··4887"·tabindex=" | |||
| 0003b6c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b6d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b6e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b6f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b700:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b | 0003b710:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b | 0003b720:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b | 0003b730:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b740:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b750:·6c6c·6170·7365·2220·6964·3d22·6964·6d34··llapse"·id="idm4 | ||
| 0003b | 0003b760:·3838·3722·3e3c·7461·626c·6520·636c·6173··887"><table·clas | ||
| 0003b | 0003b770:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b780:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b790:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b7a0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003b7b0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003b7c0:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003b | 0003b7d0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b | 0003b7e0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003b | 0003b7f0:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003b | 0003b800:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b | 0003b810:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b | 0003b820:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003b830:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003b | 0003b840:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003b | 0003b850:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003b | 0003b860:·6465·3e2d·206e·616d·653a·2027·5365·7420··de>-·name:·'Set· | ||
| 0003b | 0003b870:·6661·6374·3a20·5061·636b·6167·6520·6d61··fact:·Package·ma | ||
| 0003b | 0003b880:·6e61·6765·7220·7265·696e·7374·616c·6c20··nager·reinstall· | ||
| 0003b | 0003b890:·636f·6d6d·616e·6427·0a20·2073·6574·5f66··command'.··set_f | ||
| 0003b | 0003b8a0:·6163·743a·0a20·2020·2070·6163·6b61·6765··act:.····package | ||
| 0003b | 0003b8b0:·5f6d·616e·6167·6572·5f72·6569·6e73·7461··_manager_reinsta | ||
| 0003b | 0003b8c0:·6c6c·5f63·6d64·3a20·7975·6d20·7265·696e··ll_cmd:·yum·rein | ||
| 0003b | 0003b8d0:·7374·616c·6c20·2d79·0a20·2077·6865·6e3a··stall·-y.··when: | ||
| 0003b | 0003b8e0:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | ||
| 0003b | 0003b8f0:·7574·696f·6e20·696e·205b·2022·4665·646f··ution·in·[·"Fedo | ||
| 0003b | 0003b900:·7261·222c·2022·5265·6448·6174·222c·2022··ra",·"RedHat",·" | ||
| 0003b | 0003b910:·4365·6e74·4f53·222c·2022·4f72·6163·6c65··CentOS",·"Oracle | ||
| 0003b | 0003b920:·4c69·6e75·7822·205d·0a20·2074·6167·733a··Linux"·].··tags: | ||
| 0003b | 0003b930:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003b | 0003b940:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b | 0003b950:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003b | 0003b960:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003b660:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b670:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | |||
| 0003b680:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | |||
| 0003b | 0003b970:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b980:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | |||
| 0003b990:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | |||
| 0003b9a0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b | 0003b9b0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003b | 0003b9c0:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003b | 0003b9d0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003b9e0:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003b | 0003b9f0:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003b | 0003ba00:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003b | 0003ba10:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003b | 0003ba20:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003b | 0003ba30:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003b | 0003ba40:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| Max diff block lines reached; 15650887/15692203 bytes (99.74%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:9 | 50 | ····*·cpe:/o:oracle:linux:9 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 108, 14 lines modified | Offset 108, 27 lines modified | ||
| 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 117 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 118 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 119 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 120 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 121 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 122 | fi | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 120 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 128 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 121 | ··set_fact: | 129 | ··set_fact: |
| Offset 242, 27 lines modified | Offset 255, 14 lines modified | ||
| 242 | ··-·PCI-DSSv4-11.5.2 | 255 | ··-·PCI-DSSv4-11.5.2 |
| 243 | ··-·high_complexity | 256 | ··-·high_complexity |
| 244 | ··-·high_severity | 257 | ··-·high_severity |
| 245 | ··-·medium_disruption | 258 | ··-·medium_disruption |
| 246 | ··-·no_reboot_needed | 259 | ··-·no_reboot_needed |
| 247 | ··-·restrict_strategy | 260 | ··-·restrict_strategy |
| 248 | ··-·rpm_verify_hashes | 261 | ··-·rpm_verify_hashes |
| 249 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 250 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 251 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 252 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 253 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 254 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 255 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 256 | fi | ||
| 257 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 262 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 258 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 263 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 259 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 264 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 260 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 265 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 261 | $·rpm·-qf·FILENAME | 266 | $·rpm·-qf·FILENAME |
| 262 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 267 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 283, 14 lines modified | Offset 283, 44 lines modified | ||
| 283 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 283 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 284 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 284 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 285 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 285 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 286 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 286 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 287 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 287 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 288 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 288 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 289 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 289 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 291 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 292 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 293 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 294 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 295 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 296 | declare·-A·SETPERMS_RPM_DICT | ||
| 297 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 298 | #·is·expected·by·the·RPM·database | ||
| 299 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 300 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 301 | do | ||
| 302 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 303 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 304 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 305 | ········do | ||
| 306 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 307 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 308 | ········done | ||
| 309 | done | ||
| 310 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 311 | #·correct·values | ||
| 312 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 313 | do | ||
| 314 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 315 | done | ||
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 316 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 291 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 317 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 292 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 318 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 293 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 319 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 294 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 320 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 295 | -·name:·Read·list·of·files·with·incorrect·permissions | 321 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 296 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 322 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 368, 44 lines modified | Offset 398, 14 lines modified | ||
| 368 | ··-·PCI-DSSv4-11.5.2 | 398 | ··-·PCI-DSSv4-11.5.2 |
| 369 | ··-·high_complexity | 399 | ··-·high_complexity |
| 370 | ··-·high_severity | 400 | ··-·high_severity |
| 371 | ··-·medium_disruption | 401 | ··-·medium_disruption |
| 372 | ··-·no_reboot_needed | 402 | ··-·no_reboot_needed |
| 373 | ··-·restrict_strategy | 403 | ··-·restrict_strategy |
| 374 | ··-·rpm_verify_permissions | 404 | ··-·rpm_verify_permissions |
| 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1225138/1233410 bytes (99.33%) of diff not shown. | |||
| Offset 14300, 15 lines modified | Offset 14300, 15 lines modified | ||
| 00037db0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037db0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037dc0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037dc0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037dd0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037dd0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037de0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037de0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037df0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037df0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | 00037e10:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037e20:·3 | 00037e20:·3729·0a20·2020·2020·2020·2020·2020·2020··7).············· | ||
| 00037e30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037e70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037e70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037e80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037e80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037e90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037e90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15010, 191 lines modified | Offset 15010, 191 lines modified | ||
| 0003aa10:·2d74·6172·6765·743d·2223·6964·6d35·3731··-target="#idm571 | 0003aa10:·2d74·6172·6765·743d·2223·6964·6d35·3731··-target="#idm571 | ||
| 0003aa20:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 0003aa20:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 0003aa30:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003aa30:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003aa40:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003aa40:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003aa50:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003aa50:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003aa60:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003aa60:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003aa70:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003aa70:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003aa80:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003aa90:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003aaa0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003aab0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003aac0:·2220·6964·3d22·6964·6d35·3731·3022·3e3c··"·id="idm5710">< | |||
| 0003aad0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003aae0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003aaf0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003ab00:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003ab10:·6966·2028·205b·2021·202d·6620·2f2e·646f··if·(·[·!·-f·/.do | |||
| 0003ab20:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003ab30:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003ab40:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003ab50:·2026·616d·703b·2661·6d70·3b20·2120·2820···&&·!·(· | |||
| 0003ab60:·5b20·2224·7b63·6f6e·7461·696e·6572·3a2d··[·"${container:- | |||
| 0003ab70:·7d22·203d·3d20·2262·7772·6170·2d6f·7362··}"·==·"bwrap-osb | |||
| 0003ab80:·7569·6c64·2220·5d20·2920·293b·2074·6865··uild"·]·)·);·the | |||
| 0003ab90:·6e0a·0a66·6970·732d·6d6f·6465·2d73·6574··n..fips-mode-set | |||
| 0003aba0:·7570·202d·2d65·6e61·626c·650a·4649·5053··up·--enable.FIPS | |||
| 0003abb0:·5f43·4f4e·463d·222f·6574·632f·6472·6163··_CONF="/etc/drac | |||
| 0003abc0:·7574·2e63·6f6e·662e·642f·3430·2d66·6970··ut.conf.d/40-fip | |||
| 0003abd0:·732e·636f·6e66·220a·6966·2021·2067·7265··s.conf".if·!·gre | |||
| 0003abe0:·7020·225e·6164·645f·6472·6163·7574·6d6f··p·"^add_dracutmo | |||
| 0003abf0:·6475·6c65·732b·3d5c·2220·6669·7073·205c··dules+=\"·fips·\ | |||
| 0003ac00:·2222·2024·4649·5053·5f43·4f4e·463b·2074··""·$FIPS_CONF;·t | |||
| 0003ac10:·6865·6e0a·2020·2020·6563·686f·2022·6164··hen.····echo·"ad | |||
| 0003ac20:·645f·6472·6163·7574·6d6f·6475·6c65·732b··d_dracutmodules+ | |||
| 0003ac30:·3d5c·2220·6669·7073·205c·2222·2026·6774··=\"·fips·\""·> | |||
| 0003ac40:·3b26·6774·3b20·2446·4950·535f·434f·4e46··;>·$FIPS_CONF | |||
| 0003ac50:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003ac60:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003ac70:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003ac80:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003ac90:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003aca0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003acb0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003acc0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003acd0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003ace0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003acf0:·6765·743d·2223·6964·6d35·3731·3122·2074··get="#idm5711"·t | |||
| 0003ad00:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ad10:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ad20:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ad30:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ad40:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ad50:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003a | 0003ad60:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003a | 0003ad70:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003a | 0003ad80:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003a | 0003ad90:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003a | 0003ada0:·2069·643d·2269·646d·3537·3131·223e·3c74···id="idm5711"><t | ||
| 0003a | 0003adb0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003a | 0003adc0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003a | 0003add0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003a | 0003ade0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003a | 0003adf0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003ab20:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ab30:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | |||
| 0003ab40:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003a | 0003ae00:·7479·3a3c·2f74·683e·3c74·643e·6d65·6469··ty:</th><td>medi | ||
| 0003a | 0003ae10:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003ae20:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ae30:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | |||
| 0003ae40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a | 0003ae50:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003ab80:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 0003ab90:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003aba0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003a | 0003ae60:·7472·7565·3c2f·7464·3e3c·2f74·723e·3c74··true</td></tr><t | ||
| 0003ae70:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003ae80:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003ae90:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003a | 0003aea0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003a | 0003aeb0:·616d·653a·2043·6865·636b·2074·6f20·7365··ame:·Check·to·se | ||
| 0003a | 0003aec0:·6520·7468·6520·6375·7272·656e·7420·7374··e·the·current·st | ||
| 0003a | 0003aed0:·6174·7573·206f·6620·4649·5053·206d·6f64··atus·of·FIPS·mod | ||
| 0003aee0:·650a·2020·636f·6d6d·616e·643a·202f·7573··e.··command:·/us | |||
| 0003aef0:·722f·6269·6e2f·6669·7073·2d6d·6f64·652d··r/bin/fips-mode- | |||
| 0003af00:·7365·7475·7020·2d2d·6368·6563·6b0a·2020··setup·--check.·· | |||
| 0003af10:·7265·6769·7374·6572·3a20·6973·5f66·6970··register:·is_fip | |||
| 0003af20:·735f·656e·6162·6c65·640a·2020·6368·616e··s_enabled.··chan | |||
| 0003af30:·6765·645f·7768·656e·3a20·6661·6c73·650a··ged_when:·false. | |||
| 0003af40:·2020·6661·696c·6564·5f77·6865·6e3a·2066····failed_when:·f | |||
| 0003af50:·616c·7365·0a20·2077·6865·6e3a·2028·2061··alse.··when:·(·a | |||
| 0003af60:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003af70:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003af80:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003af90:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003afa0:·6f64·6d61·6e22·2c0a·2020·2020·2263·6f6e··odman",.····"con | |||
| 0003afb0:·7461·696e·6572·225d·2061·6e64·206e·6f74··tainer"]·and·not | |||
| 0003afc0:·2028·206c·6f6f·6b75·7028·2265·6e76·222c···(·lookup("env", | |||
| 0003afd0:·2022·636f·6e74·6169·6e65·7222·2920·3d3d···"container")·== | |||
| 0003afe0:·2022·6277·7261·702d·6f73·6275·696c·6422···"bwrap-osbuild" | |||
| 0003aff0:·2029·2029·0a20·2074·6167·733a·0a20·202d···)·).··tags:.··- | |||
| 0003b000:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b010:·3628·6129·0a20·202d·204e·4953·542d·3830··6(a).··-·NIST-80 | |||
| 0003b020:·302d·3533·2d49·412d·370a·2020·2d20·4e49··0-53-IA-7.··-·NI | |||
| 0003b030:·5354·2d38·3030·2d35·332d·5343·2d31·320a··ST-800-53-SC-12. | |||
| 0003b040:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b050:·5343·2d31·3228·3229·0a20·202d·204e·4953··SC-12(2).··-·NIS | |||
| 0003b060:·542d·3830·302d·3533·2d53·432d·3132·2833··T-800-53-SC-12(3 | |||
| 0003b070:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b080:·332d·5343·2d31·330a·2020·2d20·656e·6162··3-SC-13.··-·enab | |||
| 0003b090:·6c65·5f64·7261·6375·745f·6669·7073·5f6d··le_dracut_fips_m | |||
| Max diff block lines reached; 4614223/4640359 bytes (99.44%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:9 | 46 | ····*·cpe:/o:oracle:linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 89, 14 lines modified | Offset 89, 27 lines modified | ||
| 89 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module | 89 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module |
| 90 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 90 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 91 | ············_\x8i_\x8s_\x8m······1446 | 91 | ············_\x8i_\x8s_\x8m······1446 |
| 92 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 92 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 93 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 94 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 94 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 96 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 97 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 98 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 99 | fips-mode-setup·--enable | ||
| 100 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 101 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 102 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 103 | fi | ||
| 104 | else | ||
| 105 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 106 | fi | ||
| 96 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 97 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 98 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 99 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 100 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 101 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 112 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 102 | ··command:·/usr/bin/fips-mode-setup·--check | 113 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 154, 27 lines modified | Offset 167, 14 lines modified | ||
| 154 | ··-·NIST-800-53-SC-13 | 167 | ··-·NIST-800-53-SC-13 |
| 155 | ··-·enable_dracut_fips_module | 168 | ··-·enable_dracut_fips_module |
| 156 | ··-·high_severity | 169 | ··-·high_severity |
| 157 | ··-·medium_complexity | 170 | ··-·medium_complexity |
| 158 | ··-·medium_disruption | 171 | ··-·medium_disruption |
| 159 | ··-·reboot_required | 172 | ··-·reboot_required |
| 160 | ··-·restrict_strategy | 173 | ··-·restrict_strategy |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 163 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 164 | fips-mode-setup·--enable | ||
| 165 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 166 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 167 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 168 | fi | ||
| 169 | else | ||
| 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 171 | fi | ||
| 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 173 | To·enable·FIPS·mode,·run·the·following·command: | 175 | To·enable·FIPS·mode,·run·the·following·command: |
| 174 | fips-mode-setup·--enable | 176 | fips-mode-setup·--enable |
| 175 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 177 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 176 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 178 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 177 | ····*·Creating·/etc/system-fips | 179 | ····*·Creating·/etc/system-fips |
| Offset 187, 14 lines modified | Offset 187, 45 lines modified | ||
| 187 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 187 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 188 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 188 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 189 | ············_\x8i_\x8s_\x8m······1446 | 189 | ············_\x8i_\x8s_\x8m······1446 |
| 190 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 190 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 191 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 191 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 192 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 192 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 193 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 193 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 196 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 197 | var_system_crypto_policy='FIPS:OSPP' | ||
| 198 | fips-mode-setup·--enable | ||
| 199 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 200 | rc=$? | ||
| 201 | if·test·"$rc"·=·127;·then | ||
| 202 | » echo·"$stderr_of_call"·>&2 | ||
| 203 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 204 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 205 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | elif·test·"$rc"·!=·0;·then | ||
| 208 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 209 | » false··#·end·with·an·error·code | ||
| 210 | fi | ||
| 211 | else | ||
| 212 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 213 | fi | ||
| 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 215 | [customizations] | ||
| 216 | fips·=·true | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 218 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 219 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 220 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 221 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 199 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 222 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 200 | ··set_fact: | 223 | ··set_fact: |
| Offset 290, 45 lines modified | Offset 321, 14 lines modified | ||
| 290 | ··-·NIST-800-53-SC-13 | 321 | ··-·NIST-800-53-SC-13 |
| 291 | ··-·enable_fips_mode | 322 | ··-·enable_fips_mode |
| 292 | ··-·high_severity | 323 | ··-·high_severity |
| 293 | ··-·medium_complexity | 324 | ··-·medium_complexity |
| 294 | ··-·medium_disruption | 325 | ··-·medium_disruption |
| 295 | ··-·reboot_required | 326 | ··-·reboot_required |
| 296 | ··-·restrict_strategy | 327 | ··-·restrict_strategy |
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 563916/571013 bytes (98.76%) of diff not shown. | |||
| Offset 14296, 15 lines modified | Offset 14296, 15 lines modified | ||
| 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037de0:·6f66·2032·3032·342d·3131·2d30·3 | 00037de0:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15157, 301 lines modified | Offset 15157, 301 lines modified | ||
| 0003b340:·612d·7461·7267·6574·3d22·2369·646d·3438··a-target="#idm48 | 0003b340:·612d·7461·7267·6574·3d22·2369·646d·3438··a-target="#idm48 | ||
| 0003b350:·3836·2220·7461·6269·6e64·6578·3d22·3022··86"·tabindex="0" | 0003b350:·3836·2220·7461·6269·6e64·6578·3d22·3022··86"·tabindex="0" | ||
| 0003b360:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b360:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b370:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b370:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b380:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b380:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b390:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b390:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b3a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b3a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b3b0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b3c0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b3d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b3e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b3f0:·6522·2069·643d·2269·646d·3438·3836·223e··e"·id="idm4886"> | |||
| 0003b400:·3c70·7265·3e3c·636f·6465·3e0a·2320·4669··<pre><code>.#·Fi | |||
| 0003b410:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | |||
| 0003b420:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | |||
| 0003b430:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | |||
| 0003b440:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | |||
| 0003b450:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | |||
| 0003b460:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | |||
| 0003b470:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | |||
| 0003b480:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | |||
| 0003b490:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | |||
| 0003b4a0:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | |||
| 0003b4b0:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | |||
| 0003b4c0:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | |||
| 0003b4d0:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | |||
| 0003b4e0:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | |||
| 0003b4f0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b500:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | |||
| 0003b510:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | |||
| 0003b520:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | |||
| 0003b530:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | |||
| 0003b540:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | |||
| 0003b550:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | |||
| 0003b560:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | |||
| 0003b570:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | |||
| 0003b580:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | |||
| 0003b590:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | |||
| 0003b5a0:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | |||
| 0003b5b0:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | |||
| 0003b5c0:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | |||
| 0003b5d0:·2020·200a·2020·2020·7975·6d20·7265·696e·····.····yum·rein | |||
| 0003b5e0:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | |||
| 0003b5f0:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | |||
| 0003b600:·2020·2020·0a66·690a·3c2f·636f·6465·3e3c······.fi.</code>< | |||
| 0003b610:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b620:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b630:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b640:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b650:·612d·7461·7267·6574·3d22·2369·646d·3438··a-target="#idm48 | |||
| 0003b660:·3837·2220·7461·6269·6e64·6578·3d22·3022··87"·tabindex="0" | |||
| 0003b670:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b680:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b690:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b6a0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b6b0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b | 0003b6c0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003b | 0003b6d0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b | 0003b6e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003b6f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003b700:·6170·7365·2220·6964·3d22·6964·6d34·3838··apse"·id="idm488 | ||
| 0003b | 0003b710:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | ||
| 0003b | 0003b720:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b | 0003b730:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b | 0003b740:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b | 0003b750:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b | 0003b760:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b | 0003b770:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003b | 0003b780:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b | 0003b790:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003b | 0003b7a0:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003b | 0003b7b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b | 0003b7c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b | 0003b7d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b | 0003b7e0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003b | 0003b7f0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003b | 0003b800:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b | 0003b810:·3e2d·206e·616d·653a·2027·5365·7420·6661··>-·name:·'Set·fa | ||
| 0003b | 0003b820:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003b | 0003b830:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003b | 0003b840:·6d6d·616e·6427·0a20·2073·6574·5f66·6163··mmand'.··set_fac | ||
| 0003b | 0003b850:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003b | 0003b860:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003b | 0003b870:·5f63·6d64·3a20·7975·6d20·7265·696e·7374··_cmd:·yum·reinst | ||
| 0003b | 0003b880:·616c·6c20·2d79·0a20·2077·6865·6e3a·2061··all·-y.··when:·a | ||
| 0003b | 0003b890:·6e73·6962·6c65·5f64·6973·7472·6962·7574··nsible_distribut | ||
| 0003b | 0003b8a0:·696f·6e20·696e·205b·2022·4665·646f·7261··ion·in·[·"Fedora | ||
| 0003b | 0003b8b0:·222c·2022·5265·6448·6174·222c·2022·4365··",·"RedHat",·"Ce | ||
| 0003b | 0003b8c0:·6e74·4f53·222c·2022·4f72·6163·6c65·4c69··ntOS",·"OracleLi | ||
| 0003b | 0003b8d0:·6e75·7822·205d·0a20·2074·6167·733a·0a20··nux"·].··tags:.· | ||
| 0003b | 0003b8e0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003b | 0003b8f0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003b | 0003b900:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003b | 0003b910:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003b | 0003b920:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003b | 0003b930:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003b | 0003b940:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003b | 0003b950:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003b | 0003b960:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003b | 0003b970:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003b | 0003b980:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b | 0003b990:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003b | 0003b9a0:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003b | 0003b9b0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003b | 0003b9c0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003b | 0003b9d0:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003b | 0003b9e0:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003b | 0003b9f0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003b | 0003ba00:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003b | 0003ba10:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003b | 0003ba20:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| Max diff block lines reached; 15548103/15573825 bytes (99.83%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·9 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·9 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:9 | 44 | ····*·cpe:/o:oracle:linux:9 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 105, 14 lines modified | Offset 105, 27 lines modified | ||
| 105 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 105 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 106 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 106 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 107 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 107 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 111 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 114 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 115 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 116 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 117 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 118 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 119 | fi | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 117 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 125 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 118 | ··set_fact: | 126 | ··set_fact: |
| Offset 239, 27 lines modified | Offset 252, 14 lines modified | ||
| 239 | ··-·PCI-DSSv4-11.5.2 | 252 | ··-·PCI-DSSv4-11.5.2 |
| 240 | ··-·high_complexity | 253 | ··-·high_complexity |
| 241 | ··-·high_severity | 254 | ··-·high_severity |
| 242 | ··-·medium_disruption | 255 | ··-·medium_disruption |
| 243 | ··-·no_reboot_needed | 256 | ··-·no_reboot_needed |
| 244 | ··-·restrict_strategy | 257 | ··-·restrict_strategy |
| 245 | ··-·rpm_verify_hashes | 258 | ··-·rpm_verify_hashes |
| 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 247 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 248 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 249 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 250 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 251 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 252 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 253 | fi | ||
| 254 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 259 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 255 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 260 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 256 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 261 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 257 | run·the·following·command·to·determine·which·package·owns·it: | 262 | run·the·following·command·to·determine·which·package·owns·it: |
| 258 | $·rpm·-qf·FILENAME | 263 | $·rpm·-qf·FILENAME |
| 259 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 264 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 260 | $·sudo·rpm·--setugids·PACKAGENAME | 265 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 278, 14 lines modified | Offset 278, 40 lines modified | ||
| 278 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 278 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 279 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 279 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 280 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 280 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 281 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 281 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 282 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 283 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 283 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 284 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 284 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 285 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 286 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 287 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 288 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 289 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 290 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 291 | declare·-A·SETPERMS_RPM_DICT | ||
| 292 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 293 | #·is·expected·by·the·RPM·database | ||
| 294 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 295 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 296 | do | ||
| 297 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 298 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 299 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 300 | done | ||
| 301 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 302 | #·correct·values | ||
| 303 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 304 | do | ||
| 305 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 306 | done | ||
| 285 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 286 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 287 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 288 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 289 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 290 | -·name:·Read·list·of·files·with·incorrect·ownership | 312 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 291 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 313 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 360, 40 lines modified | Offset 386, 14 lines modified | ||
| 360 | ··-·PCI-DSSv4-11.5.2 | 386 | ··-·PCI-DSSv4-11.5.2 |
| 361 | ··-·high_complexity | 387 | ··-·high_complexity |
| 362 | ··-·high_severity | 388 | ··-·high_severity |
| 363 | ··-·medium_disruption | 389 | ··-·medium_disruption |
| 364 | ··-·no_reboot_needed | 390 | ··-·no_reboot_needed |
| 365 | ··-·restrict_strategy | 391 | ··-·restrict_strategy |
| 366 | ··-·rpm_verify_ownership | 392 | ··-·rpm_verify_ownership |
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 370 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 371 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 372 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1515167/1522926 bytes (99.49%) of diff not shown. | |||
| Offset 14286, 15 lines modified | Offset 14286, 15 lines modified | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037d40:·2d31·312d·303 | 00037d40:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15091, 301 lines modified | Offset 15091, 301 lines modified | ||
| 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af30:·2223·6964·6d34·3838·3622·2074·6162·696e··"#idm4886"·tabin | 0003af30:·2223·6964·6d34·3838·3622·2074·6162·696e··"#idm4886"·tabin | ||
| 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003af90:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003afa0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003afb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003afc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003afd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003afe0:·6d34·3838·3622·3e3c·7072·653e·3c63·6f64··m4886"><pre><cod | |||
| 0003aff0:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003b000:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003b010:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003b020:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003b030:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003b040:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003b050:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003b060:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003b070:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b080:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003b090:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003b0a0:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003b0b0:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003b0c0:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003b0d0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b0e0:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003b0f0:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003b100:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003b110:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003b120:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003b130:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003b140:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003b150:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003b160:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003b170:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003b180:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003b190:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b1a0:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003b1b0:·2027·2922·0a0a·2020·2020·0a20·2020·2079···')"..····.····y | |||
| 0003b1c0:·756d·2072·6569·6e73·7461·6c6c·202d·7920··um·reinstall·-y· | |||
| 0003b1d0:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003b1e0:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003b1f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b200:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b210:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b220:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b230:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b240:·2223·6964·6d34·3838·3722·2074·6162·696e··"#idm4887"·tabin | |||
| 0003b250:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b260:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b270:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b280:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b290:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003 | 0003b2a0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003 | 0003b2b0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003 | 0003b2c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003 | 0003b2d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003 | 0003b2e0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003 | 0003b2f0:·2269·646d·3438·3837·223e·3c74·6162·6c65··"idm4887"><table | ||
| 0003 | 0003b300:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b310:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b320:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b330:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b340:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b350:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003b360:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003b370:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003b380:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003b390:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003b3a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003b3b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b3c0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003b3d0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b | 0003b3e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b | 0003b3f0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b | 0003b400:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b | 0003b410:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b | 0003b420:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b | 0003b430:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b | 0003b440:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b | 0003b450:·696e·7374·616c·6c5f·636d·643a·2079·756d··install_cmd:·yum | ||
| 0003b | 0003b460:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b | 0003b470:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003b | 0003b480:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b | 0003b490:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b | 0003b4a0:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b | 0003b4b0:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b | 0003b4c0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b | 0003b4d0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b | 0003b4e0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b | 0003b4f0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003b500:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b | 0003b510:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b | 0003b520:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b | 0003b530:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b | 0003b540:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b | 0003b550:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003b560:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b | 0003b570:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b | 0003b580:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b | 0003b590:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b | 0003b5a0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b | 0003b5b0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b | 0003b5c0:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b | 0003b5d0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b | 0003b5e0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b | 0003b5f0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003b | 0003b600:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| Max diff block lines reached; 9412102/9437686 bytes (99.73%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·9 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·9 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:9 | 42 | ····*·cpe:/o:oracle:linux:9 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 93, 14 lines modified | Offset 93, 27 lines modified | ||
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 101 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 102 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 103 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 104 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 105 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 106 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 107 | fi | ||
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 105 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 113 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 106 | ··set_fact: | 114 | ··set_fact: |
| Offset 227, 27 lines modified | Offset 240, 14 lines modified | ||
| 227 | ··-·PCI-DSSv4-11.5.2 | 240 | ··-·PCI-DSSv4-11.5.2 |
| 228 | ··-·high_complexity | 241 | ··-·high_complexity |
| 229 | ··-·high_severity | 242 | ··-·high_severity |
| 230 | ··-·medium_disruption | 243 | ··-·medium_disruption |
| 231 | ··-·no_reboot_needed | 244 | ··-·no_reboot_needed |
| 232 | ··-·restrict_strategy | 245 | ··-·restrict_strategy |
| 233 | ··-·rpm_verify_hashes | 246 | ··-·rpm_verify_hashes |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 236 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 237 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 238 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 239 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 240 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 241 | fi | ||
| 242 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 247 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 243 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 248 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 244 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 249 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 245 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 250 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 246 | $·rpm·-qf·FILENAME | 251 | $·rpm·-qf·FILENAME |
| 247 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 252 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 268, 14 lines modified | Offset 268, 44 lines modified | ||
| 268 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 268 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 269 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 269 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 270 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 270 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 274 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 274 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 280 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 281 | declare·-A·SETPERMS_RPM_DICT | ||
| 282 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 283 | #·is·expected·by·the·RPM·database | ||
| 284 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 285 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 286 | do | ||
| 287 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 288 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 289 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 290 | ········do | ||
| 291 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 292 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 293 | ········done | ||
| 294 | done | ||
| 295 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 296 | #·correct·values | ||
| 297 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 298 | do | ||
| 299 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 300 | done | ||
| 275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 280 | -·name:·Read·list·of·files·with·incorrect·permissions | 306 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 281 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 307 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 353, 44 lines modified | Offset 383, 14 lines modified | ||
| 353 | ··-·PCI-DSSv4-11.5.2 | 383 | ··-·PCI-DSSv4-11.5.2 |
| 354 | ··-·high_complexity | 384 | ··-·high_complexity |
| 355 | ··-·high_severity | 385 | ··-·high_severity |
| 356 | ··-·medium_disruption | 386 | ··-·medium_disruption |
| 357 | ··-·no_reboot_needed | 387 | ··-·no_reboot_needed |
| 358 | ··-·restrict_strategy | 388 | ··-·restrict_strategy |
| 359 | ··-·rpm_verify_permissions | 389 | ··-·rpm_verify_permissions |
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 361 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 362 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 776139/784305 bytes (98.96%) of diff not shown. | |||
| Offset 14280, 15 lines modified | Offset 14280, 15 lines modified | ||
| 00037c70:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037c70:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037c80:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037c80:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037c90:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037c90:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ca0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ca0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037cb0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037cb0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037cc0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037cc0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037cd0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037cd0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037ce0:·2d31·312d·303 | 00037ce0:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037cf0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037cf0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d00:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d00:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d10:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d10:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d20:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d20:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d30:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d30:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d40:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d40:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037d50:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037d50:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15061, 200 lines modified | Offset 15061, 200 lines modified | ||
| 0003ad40:·2d74·6172·6765·743d·2223·6964·6d35·3232··-target="#idm522 | 0003ad40:·2d74·6172·6765·743d·2223·6964·6d35·3232··-target="#idm522 | ||
| 0003ad50:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003ad50:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003ad60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003ad60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003ad70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003ad70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003ad80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003ad80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003ad90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003ad90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003ada0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003ada0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003adb0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003adc0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003add0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ade0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003adf0:·7365·2220·6964·3d22·6964·6d35·3232·3222··se"·id="idm5222" | |||
| 0003ae00:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003ae10:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003adb0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003adc0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003add0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ade0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003adf0:·7073·6522·2069·643d·2269·646d·3532·3232··pse"·id="idm5222 | |||
| 0003ae00:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ae10:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003ae20:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003ae | 0003ae20:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003ae30:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ae40:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ae50:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ae60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ae70:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ae40:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ae50:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ae60:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ae70:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ae80:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ae90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003aea0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003aeb0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003aec0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003aed0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003aee0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003aef0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003af00:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003af10:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003af20:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003af30:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003af40:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003af50:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003af60:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003af70:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003af80:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003af90:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003afa0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003afb0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003afc0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003afd0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003afe0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003aff0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b000:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b010:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b020:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b030:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b040:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b050:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b060:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b070:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b080:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b090:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b0a0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b0b0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b0c0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b0d0:·3d22·2369·646d·3532·3233·2220·7461·6269··="#idm5223"·tabi | |||
| 0003b0e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b0f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b100:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b110:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b120:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b130:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b140:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b150:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b160:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b170:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b180:·2269·646d·3532·3233·223e·3c74·6162·6c65··"idm5223"><table | |||
| 0003b190:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b1a0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b1b0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b1c0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b1d0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003 | 0003ae80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b1f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b200:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b210:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b220:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b230:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003 | 0003ae90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003 | 0003aea0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003aeb0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003aec0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003aed0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003aee0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003aef0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003af00:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003af10:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003af20:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003af30:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003af40:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003af50:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003af60:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003af70:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003af80:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003af90:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003afa0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003afb0:·646d·3532·3233·2220·7461·6269·6e64·6578··dm5223"·tabindex | |||
| Max diff block lines reached; 30231906/30259284 bytes (99.91%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037e50:·3131·2d30·3 | 00037e50:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15079, 200 lines modified | Offset 15079, 200 lines modified | ||
| 0003ae60:·6765·743d·2223·6964·6d35·3232·3222·2074··get="#idm5222"·t | 0003ae60:·6765·743d·2223·6964·6d35·3232·3222·2074··get="#idm5222"·t | ||
| 0003ae70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ae70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ae80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ae80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ae90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ae90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003aea0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003aea0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003aeb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003aeb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003aec0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003aec0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003aed0:·20 | 0003aed0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | ||
| 0003aee0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003aef0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003af00:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003af10:·6964·3d22·6964·6d35·3232·3222·3e3c·7461··id="idm5222"><ta | |||
| 0003af20:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003af30:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003af40:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003af50:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003af60:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003af70:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003af80:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003af90:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003afa0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003afb0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003afc0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003afd0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003afe0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003aff0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b000:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b010:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b020:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b030:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b040:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b050:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b060:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b070:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b080:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b090:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b0a0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b0b0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b0c0:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | |||
| 0003b0d0:·3233·2220·7461·6269·6e64·6578·3d22·3022··23"·tabindex="0" | |||
| 0003b0e0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b0f0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b100:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b110:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b120:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b130:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003 | 0003b140:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003 | 0003b150:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003 | 0003b160:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003 | 0003b170:·6522·2069·643d·2269·646d·3532·3233·223e··e"·id="idm5223"> | ||
| 0003 | 0003b180:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003 | 0003b190:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003a | 0003b1a0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003 | 0003b1b0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003 | 0003b1c0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003 | 0003b1d0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003 | 0003b1e0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003 | 0003b1f0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003 | 0003b200:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003 | 0003b210:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003 | 0003b220:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003 | 0003b230:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003 | 0003b240:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003 | 0003b250:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003b | 0003b260:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b010:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b020:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b030:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b040:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b050:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b060:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b070:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b080:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b090:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b0a0:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b0b0:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b0c0:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b0d0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b0e0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b0f0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b100:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b110:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b120:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b130:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b140:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b150:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b160:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b170:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b180:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b | 0003b270:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 0003b280:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b290:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b2a0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b2b0:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b2c0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b2d0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b2e0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003b2f0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003b300:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003b310:·2074·6865·6e0a·2020·2020·7975·6d20·696e···then.····yum·in | |||
| 0003b320:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b330:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003b340:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003b350:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003b360:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003b370:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003b380:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b390:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b3a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b3b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b3c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| Max diff block lines reached; 30195000/30222378 bytes (99.91%) of diff not shown. | |||
| Offset 14324, 15 lines modified | Offset 14324, 15 lines modified | ||
| 00037f30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037f30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037f40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037f40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037f50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037f50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037f60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037f60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037f70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037f70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037f80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037f80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037f90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037f90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037fa0:·206f·6620·3230·3234·2d31·312d·303 | 00037fa0:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037fb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037fb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fc0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037fc0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037fd0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037fd0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037fe0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037fe0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037ff0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037ff0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038000:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038000:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038010:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038010:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15093, 118 lines modified | Offset 15093, 118 lines modified | ||
| 0003af40:·6765·743d·2223·6964·6d31·3036·3522·2074··get="#idm1065"·t | 0003af40:·6765·743d·2223·6964·6d31·3036·3522·2074··get="#idm1065"·t | ||
| 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003afb0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003afc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003afd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003afe0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003aff0:·6964·3d22·6964·6d31·3036·3522·3e3c·7461··id="idm1065"><ta | |||
| 0003b000:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b010:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b020:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b030:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b040:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b050:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b060:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b070:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b080:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b090:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b0a0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b0b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b0c0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b0d0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b0e0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b0f0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b100:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b110:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b120:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b130:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b140:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b150:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003afb0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003afc0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003afd0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003afe0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003aff0:·2069·643d·2269·646d·3130·3635·223e·3c74···id="idm1065"><t | |||
| 0003b000:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b010:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b020:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b030:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b040:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b050:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b060:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b070:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b080:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b090:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b0a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b0b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b0c0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b0d0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b0e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b0f0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b100:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b110:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b120:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b130:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b140:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b150:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b160:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b170:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b180:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b190:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b1a0:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b1b0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b1c0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b1d0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b1e0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b1f0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b200:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b210:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b220:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b230:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b240:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b250:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b260:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b270:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003b160:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003b | 0003b170:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003b | 0003b180:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003b | 0003b190:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003b | 0003b1a0:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | ||
| 0003b | 0003b1b0:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | ||
| 0003b | 0003b1c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b | 0003b1d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b | 0003b1e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b | 0003b1f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b | 0003b200:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b330:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b340:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b | 0003b210:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003b220:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b230:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b240:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b250:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b260:·6964·3d22·6964·6d31·3036·3622·3e3c·7072··id="idm1066"><pr | |||
| 0003b270:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b280:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b290:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b2a0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b2b0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b2c0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b2d0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b2e0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b2f0:·6574·3d22·2369·646d·3130·3637·2220·7461··et="#idm1067"·ta | |||
| 0003b300:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b310:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b320:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b330:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| Max diff block lines reached; 2513054/2529116 bytes (99.36%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:openembedded:harden: | 44 | ····*·cpe:/o:openembedded:harden: |
| 45 | ····*·cpe:/o:openembedded:nodistro: | 45 | ····*·cpe:/o:openembedded:nodistro: |
| 46 | ····*·cpe:/o:openembedded:petalinux: | 46 | ····*·cpe:/o:openembedded:petalinux: |
| 47 | ····*·cpe:/o:openembedded:poky: | 47 | ····*·cpe:/o:openembedded:poky: |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 120, 14 lines modified | Offset 120, 31 lines modified | ||
| 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | include·install_aide | ||
| 133 | class·install_aide·{ | ||
| 134 | ··package·{·'aide': | ||
| 135 | ····ensure·=>·'installed', | ||
| 136 | ··} | ||
| 137 | } | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | [[packages]] | ||
| 140 | name·=·"aide" | ||
| 141 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Ensure·aide·is·installed | 147 | -·name:·Ensure·aide·is·installed |
| 133 | ··package: | 148 | ··package: |
| Offset 141, 31 lines modified | Offset 158, 14 lines modified | ||
| 141 | ··-·PCI-DSSv4-11.5.2 | 158 | ··-·PCI-DSSv4-11.5.2 |
| 142 | ··-·enable_strategy | 159 | ··-·enable_strategy |
| 143 | ··-·low_complexity | 160 | ··-·low_complexity |
| 144 | ··-·low_disruption | 161 | ··-·low_disruption |
| 145 | ··-·medium_severity | 162 | ··-·medium_severity |
| 146 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 147 | ··-·package_aide_installed | 164 | ··-·package_aide_installed |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | include·install_aide | ||
| 154 | class·install_aide·{ | ||
| 155 | ··package·{·'aide': | ||
| 156 | ····ensure·=>·'installed', | ||
| 157 | ··} | ||
| 158 | } | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 164 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 166 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 165 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 167 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 166 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 168 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 167 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 169 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 168 | crontab: | 170 | crontab: |
| 169 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 171 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 359, 14 lines modified | Offset 359, 33 lines modified | ||
| 359 | ············_\x8i_\x8s_\x8m······1446 | 359 | ············_\x8i_\x8s_\x8m······1446 |
| 360 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 360 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 361 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 361 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 362 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 362 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 363 | ·····················FCS_TLSC_EXT.1 | 363 | ·····················FCS_TLSC_EXT.1 |
| 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 365 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 365 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 367 | var_system_crypto_policy='DEFAULT' | ||
| 368 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 369 | rc=$? | ||
| 370 | if·test·"$rc"·=·127;·then | ||
| 371 | » echo·"$stderr_of_call"·>&2 | ||
| 372 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 373 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 374 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 375 | » false··#·end·with·an·error·code | ||
| 376 | elif·test·"$rc"·!=·0;·then | ||
| 377 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 378 | » false··#·end·with·an·error·code | ||
| 379 | fi | ||
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 381 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 382 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 369 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 383 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 370 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 384 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 371 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 385 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 372 | ··set_fact: | 386 | ··set_fact: |
| Offset 409, 33 lines modified | Offset 428, 14 lines modified | ||
| 409 | ··-·PCI-DSSv4-2.2.7 | 428 | ··-·PCI-DSSv4-2.2.7 |
| 410 | ··-·configure_crypto_policy | 429 | ··-·configure_crypto_policy |
| 411 | ··-·high_severity | 430 | ··-·high_severity |
| 412 | ··-·low_complexity | 431 | ··-·low_complexity |
| 413 | ··-·low_disruption | 432 | ··-·low_disruption |
| 414 | ··-·no_reboot_needed | 433 | ··-·no_reboot_needed |
| 415 | ··-·restrict_strategy | 434 | ··-·restrict_strategy |
| 416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 417 | var_system_crypto_policy='DEFAULT' | ||
| 418 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| Max diff block lines reached; 303177/309105 bytes (98.08%) of diff not shown. | |||
| Offset 14319, 15 lines modified | Offset 14319, 15 lines modified | ||
| 00037ee0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037ee0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037ef0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037ef0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037f00:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037f00:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037f10:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037f10:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037f20:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037f20:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037f30:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037f30:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037f40:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037f40:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037f50:·206f·6620·3230·3234·2d31·312d·303 | 00037f50:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037f60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f70:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f70:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f80:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f80:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f90:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f90:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037fa0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037fa0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037fb0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037fb0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037fc0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037fc0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15088, 118 lines modified | Offset 15088, 118 lines modified | ||
| 0003aef0:·6574·3d22·2369·646d·3130·3635·2220·7461··et="#idm1065"·ta | 0003aef0:·6574·3d22·2369·646d·3130·3635·2220·7461··et="#idm1065"·ta | ||
| 0003af00:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003af00:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003af10:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003af10:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003af20:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003af20:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003af30:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003af30:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003af40:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003af40:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003af50:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003af50:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003af60:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003af70:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003af80:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003af90:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003afa0:·643d·2269·646d·3130·3635·223e·3c74·6162··d="idm1065"><tab | |||
| 0003afb0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003afc0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003afd0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003afe0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003aff0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b000:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b010:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b020:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003af60:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003af70:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003af80:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003af90:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003afa0:·6964·3d22·6964·6d31·3036·3522·3e3c·7461··id="idm1065"><ta | |||
| 0003afb0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003afc0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003afd0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003afe0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003aff0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b000:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b010:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b020:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b030:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b040:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b050:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b060:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b070:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b080:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b090:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b0a0:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b0b0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b0c0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b0d0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b0e0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b0f0:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b100:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b110:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b120:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b130:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b140:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b150:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b160:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003b170:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b180:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b190:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b1a0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b1b0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b1c0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b1d0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b1e0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b1f0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b200:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b210:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b220:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b230:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b240:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b250:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b260:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b270:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b280:·6d31·3036·3622·2074·6162·696e·6465·783d··m1066"·tabindex= | |||
| 0003b290:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b2a0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b2b0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b2c0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b2d0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b2e0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b2f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b300:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b310:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b320:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003b330:·3036·3622·3e3c·7461·626c·6520·636c·6173··066"><table·clas | |||
| 0003b340:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b350:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b360:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b370:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b380:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b | 0003b030:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b040:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b050:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b060:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b070:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b080:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b090:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b0a0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b0b0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b0c0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b0d0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b0e0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b0f0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b100:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b110:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b120:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b130:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b140:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b150:·2d74·6172·6765·743d·2223·6964·6d31·3036··-target="#idm106 | |||
| 0003b160:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | |||
| 0003b170:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b180:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b190:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b1a0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| Max diff block lines reached; 2455314/2471376 bytes (99.35%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:openembedded:harden: | 42 | ····*·cpe:/o:openembedded:harden: |
| 43 | ····*·cpe:/o:openembedded:nodistro: | 43 | ····*·cpe:/o:openembedded:nodistro: |
| 44 | ····*·cpe:/o:openembedded:petalinux: | 44 | ····*·cpe:/o:openembedded:petalinux: |
| 45 | ····*·cpe:/o:openembedded:poky: | 45 | ····*·cpe:/o:openembedded:poky: |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 118, 14 lines modified | Offset 118, 31 lines modified | ||
| 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | [[packages]] | ||
| 138 | name·=·"aide" | ||
| 139 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 145 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 146 | ··package: |
| Offset 139, 31 lines modified | Offset 156, 14 lines modified | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | 156 | ··-·PCI-DSSv4-11.5.2 |
| 140 | ··-·enable_strategy | 157 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 158 | ··-·low_complexity |
| 142 | ··-·low_disruption | 159 | ··-·low_disruption |
| 143 | ··-·medium_severity | 160 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 161 | ··-·no_reboot_needed |
| 145 | ··-·package_aide_installed | 162 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | include·install_aide | ||
| 152 | class·install_aide·{ | ||
| 153 | ··package·{·'aide': | ||
| 154 | ····ensure·=>·'installed', | ||
| 155 | ··} | ||
| 156 | } | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 163 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 164 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 163 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 165 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 164 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 166 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 165 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 167 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 166 | crontab: | 168 | crontab: |
| 167 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 169 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 517, 14 lines modified | Offset 517, 20 lines modified | ||
| 517 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 517 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 518 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 518 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 519 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 519 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 520 | ···········standards,·and·guidance. | 520 | ···········standards,·and·guidance. |
| 521 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 521 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 522 | Severity: ·medium | 522 | Severity: ·medium |
| 523 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue | 523 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue |
| 524 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 525 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 526 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 527 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 528 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 529 | chgrp·-L·0·/etc/issue | ||
| 524 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 525 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 531 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 526 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 532 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 527 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 533 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 528 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 534 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 529 | -·name:·Test·for·existence·/etc/issue | 535 | -·name:·Test·for·existence·/etc/issue |
| 530 | ··stat: | 536 | ··stat: |
| Offset 546, 30 lines modified | Offset 552, 30 lines modified | ||
| 546 | ··tags: | 552 | ··tags: |
| 547 | ··-·configure_strategy | 553 | ··-·configure_strategy |
| 548 | ··-·file_groupowner_etc_issue | 554 | ··-·file_groupowner_etc_issue |
| 549 | ··-·low_complexity | 555 | ··-·low_complexity |
| 550 | ··-·low_disruption | 556 | ··-·low_disruption |
| 551 | ··-·medium_severity | 557 | ··-·medium_severity |
| 552 | ··-·no_reboot_needed | 558 | ··-·no_reboot_needed |
| 553 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 554 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 555 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 556 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 557 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 558 | chgrp·-L·0·/etc/issue | ||
| 559 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 559 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 560 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: | 560 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: |
| 561 | $·sudo·chgrp·root·/etc/motd | 561 | $·sudo·chgrp·root·/etc/motd |
| 562 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 562 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 563 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 563 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 564 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 564 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 565 | ···········standards,·and·guidance. | 565 | ···········standards,·and·guidance. |
| 566 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 566 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 567 | Severity: ·medium | 567 | Severity: ·medium |
| 568 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd | 568 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd |
| 569 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 570 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 571 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 295832/302007 bytes (97.96%) of diff not shown. | |||
| Offset 14318, 15 lines modified | Offset 14318, 15 lines modified | ||
| 00037ed0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037ed0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037ee0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037ee0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ef0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ef0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f00:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f00:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f10:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f10:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00037f30:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037f40:·303 | 00037f40:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00037f50:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f50:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f60:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f60:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f70:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f70:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f80:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f80:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f90:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f90:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037fa0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037fa0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037fb0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037fb0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15113, 119 lines modified | Offset 15113, 119 lines modified | ||
| 0003b080:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b080:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b090:·6d31·3132·3322·2074·6162·696e·6465·783d··m1123"·tabindex= | 0003b090:·6d31·3132·3322·2074·6162·696e·6465·783d··m1123"·tabindex= | ||
| 0003b0a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b0a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b0b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b0b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b0c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b0c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b0d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b0d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b0e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b0e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b0f0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b100:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b110:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b120:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b130:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003b140:·3132·3322·3e3c·7461·626c·6520·636c·6173··123"><table·clas | |||
| 0003b150:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b0f0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b100:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b110:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b120:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b130:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b140:·3131·3233·223e·3c74·6162·6c65·2063·6c61··1123"><table·cla | |||
| 0003b150:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b160:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b1 | 0003b160:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b170:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b180:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b190:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b1a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b1b0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b180:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b190:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b1a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b1b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b1c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b1d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b1f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b200:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b210:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b220:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b230:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b240:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b250:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b260:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b270:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b280:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b290:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b2a0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b2b0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b2c0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b2d0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b2e0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b2f0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b300:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b310:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b320:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b330:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b340:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b350:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b360:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b370:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b380:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b390:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b3a0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b3b0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b3c0:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b3d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b3e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b3f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b400:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b410:·7267·6574·3d22·2369·646d·3131·3234·2220··rget="#idm1124"· | |||
| 0003b420:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b430:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b440:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b450:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b460:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b470:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b480:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b490:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b4a0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b4b0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b4c0:·2069·643d·2269·646d·3131·3234·223e·3c74···id="idm1124"><t | |||
| 0003b4d0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b4e0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b4f0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b500:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b510:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b1c0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b1d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b1e0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b1f0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b200:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b210:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b220:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b230:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b240:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b250:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b260:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b270:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b280:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b290:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003b2a0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b2b0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b2c0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b2d0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b2e0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b2f0:·3d22·2369·646d·3131·3234·2220·7461·6269··="#idm1124"·tabi | |||
| 0003b300:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b310:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b320:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b330:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b340:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| Max diff block lines reached; 3826489/3838273 bytes (99.69%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server | 42 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server |
| 43 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server | 43 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server |
| 44 | ····*·cpe:/o:openEuler:openEuler:22.03LTS:ga:server | 44 | ····*·cpe:/o:openEuler:openEuler:22.03LTS:ga:server |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 31 lines modified | ||
| 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | } | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"aide" | ||
| 143 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 149 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 150 | ··package: |
| Offset 143, 31 lines modified | Offset 160, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 160 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 161 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 162 | ··-·low_complexity |
| 146 | ··-·low_disruption | 163 | ··-·low_disruption |
| 147 | ··-·medium_severity | 164 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | include·install_aide | ||
| 156 | class·install_aide·{ | ||
| 157 | ··package·{·'aide': | ||
| 158 | ····ensure·=>·'installed', | ||
| 159 | ··} | ||
| 160 | } | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 167 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 166 | Run·the·following·command·to·generate·a·new·database: | 168 | Run·the·following·command·to·generate·a·new·database: |
| 167 | $·sudo·/usr/sbin/aide·--init | 169 | $·sudo·/usr/sbin/aide·--init |
| 168 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 170 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 169 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of | 171 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of |
| 170 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance | 172 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance |
| 171 | about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 173 | about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 320, 14 lines modified | Offset 320, 33 lines modified | ||
| 320 | ············_\x8i_\x8s_\x8m······1446 | 320 | ············_\x8i_\x8s_\x8m······1446 |
| 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 322 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 322 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 323 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 323 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 324 | ·····················FCS_TLSC_EXT.1 | 324 | ·····················FCS_TLSC_EXT.1 |
| 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 328 | var_system_crypto_policy='DEFAULT' | ||
| 329 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 330 | rc=$? | ||
| 331 | if·test·"$rc"·=·127;·then | ||
| 332 | » echo·"$stderr_of_call"·>&2 | ||
| 333 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 334 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 335 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 336 | » false··#·end·with·an·error·code | ||
| 337 | elif·test·"$rc"·!=·0;·then | ||
| 338 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 339 | » false··#·end·with·an·error·code | ||
| 340 | fi | ||
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 341 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 342 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 343 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 344 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 345 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 332 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 346 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 333 | ··set_fact: | 347 | ··set_fact: |
| Offset 370, 33 lines modified | Offset 389, 14 lines modified | ||
| 370 | ··-·PCI-DSSv4-2.2.7 | 389 | ··-·PCI-DSSv4-2.2.7 |
| 371 | ··-·configure_crypto_policy | 390 | ··-·configure_crypto_policy |
| 372 | ··-·high_severity | 391 | ··-·high_severity |
| 373 | ··-·low_complexity | 392 | ··-·low_complexity |
| 374 | ··-·low_disruption | 393 | ··-·low_disruption |
| 375 | ··-·no_reboot_needed | 394 | ··-·no_reboot_needed |
| 376 | ··-·restrict_strategy | 395 | ··-·restrict_strategy |
| 377 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 378 | var_system_crypto_policy='DEFAULT' | ||
| 379 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| Max diff block lines reached; 412970/419021 bytes (98.56%) of diff not shown. | |||
| Offset 14318, 15 lines modified | Offset 14318, 15 lines modified | ||
| 00037ed0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037ed0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037ee0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037ee0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037ef0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037ef0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037f00:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037f00:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037f10:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037f10:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | 00037f30:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037f40:·2d30·3 | 00037f40:·2d30·3729·0a20·2020·2020·2020·2020·2020··-07).··········· | ||
| 00037f50:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037f50:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037f60:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037f60:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037f70:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037f70:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037f80:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037f80:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037f90:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037f90:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037fa0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037fa0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037fb0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037fb0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 14927, 115 lines modified | Offset 14927, 115 lines modified | ||
| 0003a4e0:·6172·6765·743d·2223·6964·6d36·3538·3922··arget="#idm6589" | 0003a4e0:·6172·6765·743d·2223·6964·6d36·3538·3922··arget="#idm6589" | ||
| 0003a4f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003a4f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003a500:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003a500:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003a510:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003a510:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003a520:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003a520:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003a530:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003a530:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003a540:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003a540:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003a550:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003a560:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003a570:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003a580:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003a590:·6964·3d22·6964·6d36·3538·3922·3e3c·7461··id="idm6589"><ta | |||
| 0003a5a0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a5b0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a5c0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a5d0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a5e0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a550:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003a560:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003a570:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003a580:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003a590:·6522·2069·643d·2269·646d·3635·3839·223e··e"·id="idm6589"> | |||
| 0003a5a0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003a5b0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003a5c0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003a5d0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003a5e0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003a5f0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003a600:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a610:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003a | 0003a5f0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003a6 | 0003a600:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003a640:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003a650:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003a660:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003a6 | 0003a610:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003a620:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a630:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003a640:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003a6 | 0003a650:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003a660:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003a670:·643e·636f·6e66·6967·7572·653c·2f74·643e··d>configure</td> | |||
| 0003a680:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003a690:·653e·3c63·6f64·653e·6368·6772·7020·2d4c··e><code>chgrp·-L | |||
| 0003a690:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003a6a0:·653a·2054·6573·7420·666f·7220·6578·6973··e:·Test·for·exis | |||
| 0003a6b0:·7465·6e63·6520·2f65·7463·2f70·6173·7377··tence·/etc/passw | |||
| 0003a6c0:·640a·2020·7374·6174·3a0a·2020·2020·7061··d.··stat:.····pa | |||
| 0003a6d0:·7468·3a20·2f65·7463·2f70·6173·7377·640a··th:·/etc/passwd. | |||
| 0003a6e0:·2020·7265·6769·7374·6572·3a20·6669·6c65····register:·file | |||
| 0003a6f0:·5f65·7869·7374·730a·2020·7461·6773·3a0a··_exists.··tags:. | |||
| 0003a700:·2020·2d20·434a·4953·2d35·2e35·2e32·2e32····-·CJIS-5.5.2.2 | |||
| 0003a710:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003a720:·2d41·432d·3628·3129·0a20·202d·204e·4953··-AC-6(1).··-·NIS | |||
| 0003a730:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003a740:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003a750:·2d38·2e37·2e63·0a20·202d·2050·4349·2d44··-8.7.c.··-·PCI-D | |||
| 0003a760:·5353·7634·2d32·2e32·2e36·0a20·202d·2063··SSv4-2.2.6.··-·c | |||
| 0003a770:·6f6e·6669·6775·7265·5f73·7472·6174·6567··onfigure_strateg | |||
| 0003a780:·790a·2020·2d20·6669·6c65·5f67·726f·7570··y.··-·file_group | |||
| 0003a790:·6f77·6e65·725f·6574·635f·7061·7373·7764··owner_etc_passwd | |||
| 0003a7a0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003a7b0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003a7c0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003a7d0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003a7e0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003a7f0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003a800:·6772·6f75·7020·6f77·6e65·7220·3020·6f6e··group·owner·0·on | |||
| 0003a | 0003a6a0:·2030·202f·6574·632f·7061·7373·7764·0a3c···0·/etc/passwd.< | ||
| 0003a6b0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003a6c0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003a6d0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003a6e0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003a6f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003a700:·2223·6964·6d36·3539·3022·2074·6162·696e··"#idm6590"·tabin | |||
| 0003a710:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003a720:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003a730:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003a740:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003a750:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003a760:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003a770:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003a820:·696c·653a·0a20·2020·2070·6174·683a·202f··ile:.····path:·/ | |||
| 0003a830:·6574·632f·7061·7373·7764·0a20·2020·2067··etc/passwd.····g | |||
| 0003a840:·726f·7570·3a20·2730·270a·2020·7768·656e··roup:·'0'.··when | |||
| 0003a850:·3a20·6669·6c65·5f65·7869·7374·732e·7374··:·file_exists.st | |||
| 0003a860:·6174·2069·7320·6465·6669·6e65·6420·616e··at·is·defined·an | |||
| 0003a870:·6420·6669·6c65·5f65·7869·7374·732e·7374··d·file_exists.st | |||
| 0003a880:·6174·2e65·7869·7374·730a·2020·7461·6773··at.exists.··tags | |||
| 0003a890:·3a0a·2020·2d20·434a·4953·2d35·2e35·2e32··:.··-·CJIS-5.5.2 | |||
| 0003a8a0:·2e32·0a20·202d·204e·4953·542d·3830·302d··.2.··-·NIST-800- | |||
| 0003a8b0:·3533·2d41·432d·3628·3129·0a20·202d·204e··53-AC-6(1).··-·N | |||
| 0003a8c0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003a8d0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003a8e0:·6571·2d38·2e37·2e63·0a20·202d·2050·4349··eq-8.7.c.··-·PCI | |||
| 0003a8f0:·2d44·5353·7634·2d32·2e32·2e36·0a20·202d··-DSSv4-2.2.6.··- | |||
| 0003a900:·2063·6f6e·6669·6775·7265·5f73·7472·6174···configure_strat | |||
| 0003a910:·6567·790a·2020·2d20·6669·6c65·5f67·726f··egy.··-·file_gro | |||
| 0003a920:·7570·6f77·6e65·725f·6574·635f·7061·7373··upowner_etc_pass | |||
| 0003a930:·7764·0a20·202d·206c·6f77·5f63·6f6d·706c··wd.··-·low_compl | |||
| 0003a940:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003a950:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003a960:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003a970:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003a980:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003a990:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003a9a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003a9b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003a9c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003a9d0:·6574·3d22·2369·646d·3635·3930·2220·7461··et="#idm6590"·ta | |||
| 0003a9e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| Max diff block lines reached; 30692/46340 bytes (66.23%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:opensuse:leap:15.0 | 42 | ····*·cpe:/o:opensuse:leap:15.0 |
| 43 | ····*·cpe:/o:opensuse:leap:42.1 | 43 | ····*·cpe:/o:opensuse:leap:42.1 |
| 44 | ····*·cpe:/o:opensuse:leap:42.2 | 44 | ····*·cpe:/o:opensuse:leap:42.2 |
| 45 | ····*·cpe:/o:opensuse:leap:42.3 | 45 | ····*·cpe:/o:opensuse:leap:42.3 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 53 | Group ·Guide·to·the·Secure·Configuration·of·openSUSE· Group·contains·4·groups | 53 | Group ·Guide·to·the·Secure·Configuration·of·openSUSE· Group·contains·4·groups |
| 54 | and·3·rules | 54 | and·3·rules |
| 55 | Group ·System·Settings· Group·contains·3·groups·and·3·rules | 55 | Group ·System·Settings· Group·contains·3·groups·and·3·rules |
| Offset 106, 14 lines modified | Offset 106, 20 lines modified | ||
| 106 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 106 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 107 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 107 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 111 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 111 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 118 | chgrp·-L·0·/etc/passwd | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 118 | -·name:·Test·for·existence·/etc/passwd | 124 | -·name:·Test·for·existence·/etc/passwd |
| 119 | ··stat: | 125 | ··stat: |
| Offset 145, 20 lines modified | Offset 151, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-2.2.6 | 151 | ··-·PCI-DSSv4-2.2.6 |
| 146 | ··-·configure_strategy | 152 | ··-·configure_strategy |
| 147 | ··-·file_groupowner_etc_passwd | 153 | ··-·file_groupowner_etc_passwd |
| 148 | ··-·low_complexity | 154 | ··-·low_complexity |
| 149 | ··-·low_disruption | 155 | ··-·low_disruption |
| 150 | ··-·medium_severity | 156 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 157 | chgrp·-L·0·/etc/passwd | ||
| 158 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 158 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 159 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: | 159 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: |
| 160 | $·sudo·chown·root·/etc/passwd | 160 | $·sudo·chown·root·/etc/passwd |
| 161 | ············The·/etc/passwd·file·contains·information·about·the·users·that·are | 161 | ············The·/etc/passwd·file·contains·information·about·the·users·that·are |
| 162 | Rationale:··configured·on·the·system.·Protection·of·this·file·is·critical·for | 162 | Rationale:··configured·on·the·system.·Protection·of·this·file·is·critical·for |
| 163 | ············system·security. | 163 | ············system·security. |
| 164 | Severity: ··medium | 164 | Severity: ··medium |
| Offset 179, 14 lines modified | Offset 179, 20 lines modified | ||
| 179 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 179 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 180 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 180 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 182 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 182 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 184 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 184 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 185 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 | 185 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 191 | chown·-L·0·/etc/passwd | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 191 | -·name:·Test·for·existence·/etc/passwd | 197 | -·name:·Test·for·existence·/etc/passwd |
| 192 | ··stat: | 198 | ··stat: |
| Offset 218, 20 lines modified | Offset 224, 14 lines modified | ||
| 218 | ··-·PCI-DSSv4-2.2.6 | 224 | ··-·PCI-DSSv4-2.2.6 |
| 219 | ··-·configure_strategy | 225 | ··-·configure_strategy |
| 220 | ··-·file_owner_etc_passwd | 226 | ··-·file_owner_etc_passwd |
| 221 | ··-·low_complexity | 227 | ··-·low_complexity |
| 222 | ··-·low_disruption | 228 | ··-·low_disruption |
| 223 | ··-·medium_severity | 229 | ··-·medium_severity |
| 224 | ··-·no_reboot_needed | 230 | ··-·no_reboot_needed |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 230 | chown·-L·0·/etc/passwd | ||
| 231 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 231 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 232 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: | 232 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: |
| 233 | $·sudo·chmod·0644·/etc/passwd | 233 | $·sudo·chmod·0644·/etc/passwd |
| 234 | ············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world | 234 | ············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world |
| 235 | Rationale:··the·risk·of·its·compromise·is·increased.·The·file·contains·the·list | 235 | Rationale:··the·risk·of·its·compromise·is·increased.·The·file·contains·the·list |
| 236 | ············of·accounts·on·the·system·and·associated·information,·and | 236 | ············of·accounts·on·the·system·and·associated·information,·and |
| 237 | ············protection·of·this·file·is·critical·for·system·security. | 237 | ············protection·of·this·file·is·critical·for·system·security. |
| Offset 253, 14 lines modified | Offset 253, 25 lines modified | ||
| 253 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 253 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 254 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 254 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 255 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 255 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 256 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 256 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 257 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 257 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 258 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 258 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 259 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 | 259 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 |
| 260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 265 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 267 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 268 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 269 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 270 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 265 | -·name:·Test·for·existence·/etc/passwd | 271 | -·name:·Test·for·existence·/etc/passwd |
| 266 | ··stat: | 272 | ··stat: |
| Offset 292, 22 lines modified | Offset 303, 11 lines modified | ||
| 292 | ··-·PCI-DSSv4-2.2.6 | 303 | ··-·PCI-DSSv4-2.2.6 |
| Max diff block lines reached; 675/6398 bytes (10.55%) of diff not shown. | |||
| Offset 14309, 15 lines modified | Offset 14309, 15 lines modified | ||
| 00037e40:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e40:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e50:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e50:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e60:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e60:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e70:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e70:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e80:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e80:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e90:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e90:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ea0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037eb0:·206f·6620·3230·3234·2d31·312d·303 | 00037eb0:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ed0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ed0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ee0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ee0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037ef0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037ef0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f00:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f00:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f10:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f10:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f20:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f20:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 14308, 15 lines modified | Offset 14308, 15 lines modified | ||
| 00037e30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037e90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037e90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ea0:·206f·6620·3230·3234·2d31·312d·303 | 00037ea0:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037eb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037eb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ec0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ec0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ed0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ed0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037ee0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037ee0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037ef0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037ef0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f00:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f00:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f10:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f10:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 14310, 15 lines modified | Offset 14310, 15 lines modified | ||
| 00037e50:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e50:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e60:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e60:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e70:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e70:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e80:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e80:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e90:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e90:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ea0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ea0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037eb0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037eb0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ec0:·206f·6620·3230·3234·2d31·312d·303 | 00037ec0:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ee0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ef0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ef0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f00:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f00:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f10:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f10:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f20:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f20:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f30:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f30:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 14309, 15 lines modified | Offset 14309, 15 lines modified | ||
| 00037e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037eb0:·3230·3234·2d31·312d·303 | 00037eb0:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 58 | ·········1.·_\x8M_\x8a_\x8i_\x8l_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 58 | ·········1.·_\x8M_\x8a_\x8i_\x8l_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | 00037e40:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00037e50:·2d30·3 | 00037e50:·2d30·3729·0a20·2020·2020·2020·2020·2020··-07).··········· | ||
| 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi-2022 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi-2022 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 | 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 |
| 55 | Group·contains·2·groups·and·3·rules | 55 | Group·contains·2·groups·and·3·rules |
| 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules | 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules |
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037dd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037de0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037de0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037df0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037df0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e00:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e00:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e10:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e10:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e20:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e20:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037e30:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037e40:·206f·6620·3230·3234·2d31·312d·303 | 00037e40:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e60:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e60:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e70:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e70:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e80:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e80:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e90:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e90:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037ea0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037ea0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037eb0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037eb0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 | 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 |
| 55 | Group·contains·2·groups·and·3·rules | 55 | Group·contains·2·groups·and·3·rules |
| 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules | 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules |
| Offset 14304, 15 lines modified | Offset 14304, 15 lines modified | ||
| 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | 00037e50:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037e60:·3 | 00037e60:·3729·0a20·2020·2020·2020·2020·2020·2020··7).············· | ||
| 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 55 | ·········4.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 55 | ·········4.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 14356, 15 lines modified | Offset 14356, 15 lines modified | ||
| 00038130:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038130:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038140:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038140:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038150:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038150:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038160:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038160:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038170:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038170:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038180:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038180:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038190:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038190:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000381a0:·7320·6f66·2032·3032·342d·3131·2d30·3 | 000381a0:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 000381b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000381b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000381c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000381c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000381d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000381d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000381e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000381e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000381f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000381f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038200:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038200:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038210:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038210:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 19033, 66 lines modified | Offset 19033, 66 lines modified | ||
| 0004a580:·6574·3d22·2369·646d·3733·3933·2220·7461··et="#idm7393"·ta | 0004a580:·6574·3d22·2369·646d·3733·3933·2220·7461··et="#idm7393"·ta | ||
| 0004a590:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0004a590:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0004a5a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0004a5a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0004a5b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0004a5b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0004a5c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0004a5c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0004a5d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0004a5d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0004a5e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0004a5e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0004a5f0:· | 0004a5f0:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | ||
| 0004a600:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0004a6 | 0004a610:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0004a6 | 0004a620:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0004a6 | 0004a630:·6522·2069·643d·2269·646d·3733·3933·223e··e"·id="idm7393"> | ||
| 0004a6 | 0004a640:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0004a6 | 0004a650:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0004a6 | 0004a660:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0004a6 | 0004a670:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0004a6 | 0004a680:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0004a6 | 0004a690:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0004a690:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0004a6a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0004a6b0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | |||
| 0004a6 | 0004a6a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0004a6b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0004a6c0:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | |||
| 0004a6d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0004a6 | 0004a6e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e74··eboot:</th><td>t | ||
| 0004a6 | 0004a6f0:·7275·653c·2f74·643e·3c2f·7472·3e3c·7472··rue</td></tr><tr | ||
| 0004a | 0004a700:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0004a7 | 0004a710:·7468·3e3c·7464·3e64·6973·6162·6c65·3c2f··th><td>disable</ | ||
| 0004a7 | 0004a720:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0004a7 | 0004a730:·3c70·7265·3e3c·636f·6465·3e61·7069·5665··<pre><code>apiVe | ||
| 0004a7 | 0004a740:·7273·696f·6e3a·206d·6163·6869·6e65·636f··rsion:·machineco | ||
| 0004a7 | 0004a750:·6e66·6967·7572·6174·696f·6e2e·6f70·656e··nfiguration.open | ||
| 0004a7 | 0004a760:·7368·6966·742e·696f·2f76·310a·6b69·6e64··shift.io/v1.kind | ||
| 0004a7 | 0004a770:·3a20·4d61·6368·696e·6543·6f6e·6669·670a··:·MachineConfig. | ||
| 0004a7 | 0004a780:·7370·6563·3a0a·2020·636f·6e66·6967·3a0a··spec:.··config:. | ||
| 0004a7 | 0004a790:·2020·2020·6967·6e69·7469·6f6e·3a0a·2020······ignition:.·· | ||
| 0004a7 | 0004a7a0:·2020·2020·7665·7273·696f·6e3a·2033·2e31······version:·3.1 | ||
| 0004a7 | 0004a7b0:·2e30·0a20·2020·2073·7973·7465·6d64·3a0a··.0.····systemd:. | ||
| 0004a7 | 0004a7c0:·2020·2020·2020·756e·6974·733a·0a20·2020········units:.··· | ||
| 0004a7c0:·0a20·2020·2020·202d·206e·616d·653a·2064··.······-·name:·d | |||
| 0004a7d0:·6562·7567·2d73·6865·6c6c·2e73·6572·7669··ebug-shell.servi | |||
| 0004a7e0:·6365·0a20·2020·2020·2020·2065·6e61·626c··ce.········enabl | |||
| 0004a7f0:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | |||
| 0004a800:·2020·6d61·736b·3a20·7472·7565·0a20·2020····mask:·true.··· | |||
| 0004a | 0004a7d0:·2020·202d·206e·616d·653a·2064·6562·7567·····-·name:·debug | ||
| 0004a | 0004a7e0:·2d73·6865·6c6c·2e73·6572·7669·6365·0a20··-shell.service.· | ||
| 0004a | 0004a7f0:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | ||
| 0004a8 | 0004a800:·6661·6c73·650a·2020·2020·2020·2020·6d61··false.········ma | ||
| 0004a810:·736b·3a20·7472·7565·0a20·2020·2020·202d··sk:·true.······- | |||
| 0004a820:·206e·616d·653a·2064·6562·7567·2d73·6865···name:·debug-she | |||
| 0004a830:·6c6c·2e73·6f63·6b65·740a·2020·2020·2020··ll.socket.······ | |||
| 0004a840:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0004a850:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0004a8 | 0004a860:·7275·650a·3c2f·636f·6465·3e3c·2f70·7265··rue.</code></pre | ||
| 0004a8 | 0004a870:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0004a8 | 0004a880:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0004a8 | 0004a890:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0004a8 | 0004a8a0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0004a8 | 0004a8b0:·7267·6574·3d22·2369·646d·3733·3934·2220··rget="#idm7394"· | ||
| 0004a8 | 0004a8c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0004a8 | 0004a8d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0004a8 | 0004a8e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0004a8 | 0004a8f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0004a | 0004a900:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0004a9 | 0004a910:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0004a910:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | |||
| 0004a920:· | 0004a920:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | ||
| 0004a930:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | 0004a930:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0004a940:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | 0004a940:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0004a950:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | 0004a950:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0004a960:·3733·3934·223e·3c74·6162·6c65·2063·6c61··7394"><table·cla | 0004a960:·3733·3934·223e·3c74·6162·6c65·2063·6c61··7394"><table·cla | ||
| 0004a970:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | 0004a970:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0004a980:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | 0004a980:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0004a990:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | 0004a990:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| Offset 34734, 66 lines modified | Offset 34734, 66 lines modified | ||
| 00087ad0:·6172·6765·743d·2223·6964·6d31·3831·3338··arget="#idm18138 | 00087ad0:·6172·6765·743d·2223·6964·6d31·3831·3338··arget="#idm18138 | ||
| 00087ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00087ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00087af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00087af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00087b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00087b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00087b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00087b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00087b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00087b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00087b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00087b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00087b40:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 00087b50:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00087b60:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00087b70:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00087b80:·6c61·7073·6522·2069·643d·2269·646d·3138··lapse"·id="idm18 | |||
| 00087b90:·3133·3822·3e3c·7461·626c·6520·636c·6173··138"><table·clas | |||
| 00087ba0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00087bb0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00087bc0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00087bd0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00087be0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00087bf0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00087c00:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00087c10:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | |||
| 00087c20:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | |||
| 00087c30:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00087c40:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 00087c50:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00087c60:·6779·3a3c·2f74·683e·3c74·643e·6469·7361··gy:</th><td>disa | |||
| 00087c70:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00087c80:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00087c90:·6170·6956·6572·7369·6f6e·3a20·6d61·6368··apiVersion:·mach | |||
| 00087ca0:·696e·6563·6f6e·6669·6775·7261·7469·6f6e··ineconfiguration | |||
| 00087cb0:·2e6f·7065·6e73·6869·6674·2e69·6f2f·7631··.openshift.io/v1 | |||
| 00087cc0:·0a6b·696e·643a·204d·6163·6869·6e65·436f··.kind:·MachineCo | |||
| 00087cd0:·6e66·6967·0a73·7065·633a·0a20·2063·6f6e··nfig.spec:.··con | |||
| 00087ce0:·6669·673a·0a20·2020·2069·676e·6974·696f··fig:.····ignitio | |||
| 00087cf0:·6e3a·0a20·2020·2020·2076·6572·7369·6f6e··n:.······version | |||
| Max diff block lines reached; 16750/33802 bytes (49.55%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high-rev-4 | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high-rev-4 |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 429, 15 lines modified | Offset 429, 15 lines modified | ||
| 429 | Identifiers:·CCE-82496-1 | 429 | Identifiers:·CCE-82496-1 |
| 430 | ·············_\x8c_\x8u_\x8i····3.4.5 | 430 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 441 | apiVersion:·machineconfiguration.openshift.io/v1 | 441 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 442 | kind:·MachineConfig | 442 | kind:·MachineConfig |
| 443 | spec: | 443 | spec: |
| Offset 448, 15 lines modified | Offset 448, 15 lines modified | ||
| 448 | ······units: | 448 | ······units: |
| 449 | ······-·name:·debug-shell.service | 449 | ······-·name:·debug-shell.service |
| 450 | ········enabled:·false | 450 | ········enabled:·false |
| 451 | ········mask:·true | 451 | ········mask:·true |
| 452 | ······-·name:·debug-shell.socket | 452 | ······-·name:·debug-shell.socket |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 460 | apiVersion:·machineconfiguration.openshift.io/v1 | 460 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 461 | kind:·MachineConfig | 461 | kind:·MachineConfig |
| 462 | spec: | 462 | spec: |
| Offset 1879, 15 lines modified | Offset 1879, 15 lines modified | ||
| 1879 | ············_\x8c_\x8u_\x8i············3.1.16 | 1879 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1891 | apiVersion:·machineconfiguration.openshift.io/v1 | 1891 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1892 | kind:·MachineConfig | 1892 | kind:·MachineConfig |
| 1893 | spec: | 1893 | spec: |
| Offset 1898, 15 lines modified | Offset 1898, 15 lines modified | ||
| 1898 | ······units: | 1898 | ······units: |
| 1899 | ······-·name:·bluetooth.service | 1899 | ······-·name:·bluetooth.service |
| 1900 | ········enabled:·false | 1900 | ········enabled:·false |
| 1901 | ········mask:·true | 1901 | ········mask:·true |
| 1902 | ······-·name:·bluetooth.socket | 1902 | ······-·name:·bluetooth.socket |
| 1903 | ········enabled:·false | 1903 | ········enabled:·false |
| 1904 | ········mask:·true | 1904 | ········mask:·true |
| 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1910 | apiVersion:·machineconfiguration.openshift.io/v1 | 1910 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1911 | kind:·MachineConfig | 1911 | kind:·MachineConfig |
| 1912 | spec: | 1912 | spec: |
| Offset 2215, 15 lines modified | Offset 2215, 15 lines modified | ||
| 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2227 | apiVersion:·machineconfiguration.openshift.io/v1 | 2227 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2228 | kind:·MachineConfig | 2228 | kind:·MachineConfig |
| 2229 | spec: | 2229 | spec: |
| Offset 2234, 15 lines modified | Offset 2234, 15 lines modified | ||
| 2234 | ······units: | 2234 | ······units: |
| 2235 | ······-·name:·autofs.service | 2235 | ······-·name:·autofs.service |
| 2236 | ········enabled:·false | 2236 | ········enabled:·false |
| 2237 | ········mask:·true | 2237 | ········mask:·true |
| 2238 | ······-·name:·autofs.socket | 2238 | ······-·name:·autofs.socket |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2246 | apiVersion:·machineconfiguration.openshift.io/v1 | 2246 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2247 | kind:·MachineConfig | 2247 | kind:·MachineConfig |
| 2248 | spec: | 2248 | spec: |
| Offset 3585, 15 lines modified | Offset 3585, 15 lines modified | ||
| 3585 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 3585 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 3586 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 3586 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 3587 | Severity: ···high | 3587 | Severity: ···high |
| 3588 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 3588 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 3589 | Identifiers:·CCE-86189-8 | 3589 | Identifiers:·CCE-86189-8 |
| 3590 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 3590 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 3591 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 3591 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 3592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 3592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 3593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3597 | apiVersion:·machineconfiguration.openshift.io/v1 | 3597 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3598 | kind:·MachineConfig | 3598 | kind:·MachineConfig |
| 3599 | spec: | 3599 | spec: |
| Max diff block lines reached; 547/8543 bytes (6.40%) of diff not shown. | |||
| Offset 14356, 15 lines modified | Offset 14356, 15 lines modified | ||
| 00038130:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038130:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038140:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038140:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038150:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038150:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038160:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038160:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038170:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038170:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038180:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038180:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038190:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038190:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 000381a0:·3032·342d·3131·2d30·3 | 000381a0:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 000381b0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 000381b0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000381c0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000381c0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000381d0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000381d0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000381e0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000381e0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000381f0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000381f0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038200:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038200:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038210:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038210:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 19032, 67 lines modified | Offset 19032, 67 lines modified | ||
| 0004a570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0004a570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004a580:·646d·3733·3933·2220·7461·6269·6e64·6578··dm7393"·tabindex | 0004a580:·646d·3733·3933·2220·7461·6269·6e64·6578··dm7393"·tabindex | ||
| 0004a590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0004a590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0004a5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0004a5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0004a5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0004a5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0004a5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0004a5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0004a5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0004a5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0004a5e0:·6d65·6469·6174·696f·6e20· | 0004a5e0:·6d65·6469·6174·696f·6e20·4b75·6265·726e··mediation·Kubern | ||
| 0004a5f0:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 0004a | 0004a600:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0004a6 | 0004a610:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0004a6 | 0004a620:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0004a6 | 0004a630:·2269·646d·3733·3933·223e·3c74·6162·6c65··"idm7393"><table | ||
| 0004a6 | 0004a640:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0004a6 | 0004a650:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0004a6 | 0004a660:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0004a6 | 0004a670:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0004a6 | 0004a680:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0004a6 | 0004a690:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0004a6a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0004a6b0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0004a6c0:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 0004a6d0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0004a6e0:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0004a6 | 0004a6f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0004a6a0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0004a6b0:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0004a6c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004a6d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 0004a6e0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0004a | 0004a700:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0004a7 | 0004a710:·3e64·6973·6162·6c65·3c2f·7464·3e3c·2f74··>disable</td></t | ||
| 0004a7 | 0004a720:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0004a7 | 0004a730:·636f·6465·3e61·7069·5665·7273·696f·6e3a··code>apiVersion: | ||
| 0004a7 | 0004a740:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | ||
| 0004a7 | 0004a750:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | ||
| 0004a7 | 0004a760:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | ||
| 0004a7 | 0004a770:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | ||
| 0004a7 | 0004a780:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | ||
| 0004a7 | 0004a790:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | ||
| 0004a7 | 0004a7a0:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | ||
| 0004a7 | 0004a7b0:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | ||
| 0004a7 | 0004a7c0:·756e·6974·733a·0a20·2020·2020·202d·206e··units:.······-·n | ||
| 0004a7c0:·202d·206e·616d·653a·2064·6562·7567·2d73···-·name:·debug-s | |||
| 0004a7d0:·6865·6c6c·2e73·6572·7669·6365·0a20·2020··hell.service.··· | |||
| 0004a7e0:·2020·2020·2065·6e61·626c·6564·3a20·6661·······enabled:·fa | |||
| 0004a7f0:·6c73·650a·2020·2020·2020·2020·6d61·736b··lse.········mask | |||
| 0004a800:·3a20·7472·7565·0a20·2020·2020·202d·206e··:·true.······-·n | |||
| 0004a | 0004a7d0:·616d·653a·2064·6562·7567·2d73·6865·6c6c··ame:·debug-shell | ||
| 0004a | 0004a7e0:·2e73·6572·7669·6365·0a20·2020·2020·2020··.service.······· | ||
| 0004a | 0004a7f0:·2065·6e61·626c·6564·3a20·6661·6c73·650a···enabled:·false. | ||
| 0004a8 | 0004a800:·2020·2020·2020·2020·6d61·736b·3a20·7472··········mask:·tr | ||
| 0004a810:·7565·0a20·2020·2020·202d·206e·616d·653a··ue.······-·name: | |||
| 0004a820:·2064·6562·7567·2d73·6865·6c6c·2e73·6f63···debug-shell.soc | |||
| 0004a830:·6b65·740a·2020·2020·2020·2020·656e·6162··ket.········enab | |||
| 0004a840:·6c65·643a·2066·616c·7365·0a20·2020·2020··led:·false.····· | |||
| 0004a850:·2020·206d·6173·6b3a·2074·7275·650a·3c2f·····mask:·true.</ | |||
| 0004a8 | 0004a860:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 0004a8 | 0004a870:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 0004a8 | 0004a880:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | ||
| 0004a8 | 0004a890:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | ||
| 0004a8 | 0004a8a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0004a8 | 0004a8b0:·2369·646d·3733·3934·2220·7461·6269·6e64··#idm7394"·tabind | ||
| 0004a8 | 0004a8c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0004a8 | 0004a8d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0004a8 | 0004a8e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0004a8 | 0004a8f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0004a | 0004a900:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0004a9 | 0004a910:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | ||
| 0004a910:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 0004a920:· | 0004a920:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0004a930:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | 0004a930:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0004a940:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | 0004a940:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0004a950:·6522·2069·643d·2269·646d·3733·3934·223e··e"·id="idm7394"> | 0004a950:·6522·2069·643d·2269·646d·3733·3934·223e··e"·id="idm7394"> | ||
| 0004a960:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | 0004a960:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0004a970:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | 0004a970:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0004a980:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | 0004a980:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0004a990:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | 0004a990:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| Offset 34733, 67 lines modified | Offset 34733, 67 lines modified | ||
| 00087ac0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00087ac0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00087ad0:·2223·6964·6d31·3831·3338·2220·7461·6269··"#idm18138"·tabi | 00087ad0:·2223·6964·6d31·3831·3338·2220·7461·6269··"#idm18138"·tabi | ||
| 00087ae0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00087ae0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00087af0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00087af0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00087b00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00087b00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00087b10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00087b10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00087b20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00087b20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00087b30:·223e·5265·6d65·6469·6174·696f·6e20· | 00087b30:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | ||
| 00087b40:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 00087b | 00087b50:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 00087b | 00087b60:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 00087b | 00087b70:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 00087b | 00087b80:·2069·643d·2269·646d·3138·3133·3822·3e3c···id="idm18138">< | ||
| 00087b | 00087b90:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 00087b | 00087ba0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 00087b | 00087bb0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 00087b | 00087bc0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 00087b | 00087bd0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 00087b | 00087be0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 00087be0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00087bf0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00087c00:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | |||
| 00087 | 00087bf0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 00087c00:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00087c10:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | |||
| 00087c20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00087c | 00087c30:·626f·6f74·3a3c·2f74·683e·3c74·643e·7472··boot:</th><td>tr | ||
| 00087c | 00087c40:·7565·3c2f·7464·3e3c·2f74·723e·3c74·723e··ue</td></tr><tr> | ||
| 00087c | 00087c50:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 00087c | 00087c60:·683e·3c74·643e·6469·7361·626c·653c·2f74··h><td>disable</t | ||
| 00087c | 00087c70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 00087c | 00087c80:·7072·653e·3c63·6f64·653e·6170·6956·6572··pre><code>apiVer | ||
| Max diff block lines reached; 16612/33940 bytes (48.95%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 429, 15 lines modified | Offset 429, 15 lines modified | ||
| 429 | Identifiers:·CCE-82496-1 | 429 | Identifiers:·CCE-82496-1 |
| 430 | ·············_\x8c_\x8u_\x8i····3.4.5 | 430 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 441 | apiVersion:·machineconfiguration.openshift.io/v1 | 441 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 442 | kind:·MachineConfig | 442 | kind:·MachineConfig |
| 443 | spec: | 443 | spec: |
| Offset 448, 15 lines modified | Offset 448, 15 lines modified | ||
| 448 | ······units: | 448 | ······units: |
| 449 | ······-·name:·debug-shell.service | 449 | ······-·name:·debug-shell.service |
| 450 | ········enabled:·false | 450 | ········enabled:·false |
| 451 | ········mask:·true | 451 | ········mask:·true |
| 452 | ······-·name:·debug-shell.socket | 452 | ······-·name:·debug-shell.socket |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 460 | apiVersion:·machineconfiguration.openshift.io/v1 | 460 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 461 | kind:·MachineConfig | 461 | kind:·MachineConfig |
| 462 | spec: | 462 | spec: |
| Offset 1879, 15 lines modified | Offset 1879, 15 lines modified | ||
| 1879 | ············_\x8c_\x8u_\x8i············3.1.16 | 1879 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1891 | apiVersion:·machineconfiguration.openshift.io/v1 | 1891 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1892 | kind:·MachineConfig | 1892 | kind:·MachineConfig |
| 1893 | spec: | 1893 | spec: |
| Offset 1898, 15 lines modified | Offset 1898, 15 lines modified | ||
| 1898 | ······units: | 1898 | ······units: |
| 1899 | ······-·name:·bluetooth.service | 1899 | ······-·name:·bluetooth.service |
| 1900 | ········enabled:·false | 1900 | ········enabled:·false |
| 1901 | ········mask:·true | 1901 | ········mask:·true |
| 1902 | ······-·name:·bluetooth.socket | 1902 | ······-·name:·bluetooth.socket |
| 1903 | ········enabled:·false | 1903 | ········enabled:·false |
| 1904 | ········mask:·true | 1904 | ········mask:·true |
| 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1910 | apiVersion:·machineconfiguration.openshift.io/v1 | 1910 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1911 | kind:·MachineConfig | 1911 | kind:·MachineConfig |
| 1912 | spec: | 1912 | spec: |
| Offset 2215, 15 lines modified | Offset 2215, 15 lines modified | ||
| 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2227 | apiVersion:·machineconfiguration.openshift.io/v1 | 2227 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2228 | kind:·MachineConfig | 2228 | kind:·MachineConfig |
| 2229 | spec: | 2229 | spec: |
| Offset 2234, 15 lines modified | Offset 2234, 15 lines modified | ||
| 2234 | ······units: | 2234 | ······units: |
| 2235 | ······-·name:·autofs.service | 2235 | ······-·name:·autofs.service |
| 2236 | ········enabled:·false | 2236 | ········enabled:·false |
| 2237 | ········mask:·true | 2237 | ········mask:·true |
| 2238 | ······-·name:·autofs.socket | 2238 | ······-·name:·autofs.socket |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2246 | apiVersion:·machineconfiguration.openshift.io/v1 | 2246 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2247 | kind:·MachineConfig | 2247 | kind:·MachineConfig |
| 2248 | spec: | 2248 | spec: |
| Offset 3585, 15 lines modified | Offset 3585, 15 lines modified | ||
| 3585 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 3585 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 3586 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 3586 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 3587 | Severity: ···high | 3587 | Severity: ···high |
| 3588 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 3588 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 3589 | Identifiers:·CCE-86189-8 | 3589 | Identifiers:·CCE-86189-8 |
| 3590 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 3590 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 3591 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 3591 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 3592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 3592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 3593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3597 | apiVersion:·machineconfiguration.openshift.io/v1 | 3597 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3598 | kind:·MachineConfig | 3598 | kind:·MachineConfig |
| 3599 | spec: | 3599 | spec: |
| Max diff block lines reached; 547/8537 bytes (6.41%) of diff not shown. | |||
| Offset 14358, 15 lines modified | Offset 14358, 15 lines modified | ||
| 00038150:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038150:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038160:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038160:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038170:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038170:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038180:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038180:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038190:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038190:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 000381a0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000381a0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000381b0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | 000381b0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 000381c0:·2d30·3 | 000381c0:·2d30·3729·0a20·2020·2020·2020·2020·2020··-07).··········· | ||
| 000381d0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 000381d0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 000381e0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 000381e0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 000381f0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 000381f0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038200:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038200:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038210:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038210:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038220:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038220:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038230:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038230:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 19034, 66 lines modified | Offset 19034, 66 lines modified | ||
| 0004a590:·7461·7267·6574·3d22·2369·646d·3733·3933··target="#idm7393 | 0004a590:·7461·7267·6574·3d22·2369·646d·3733·3933··target="#idm7393 | ||
| 0004a5a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0004a5a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004a5b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0004a5b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004a5c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0004a5c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004a5d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0004a5d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004a5e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0004a5e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004a5f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0004a5f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004a600:·696f·6e20· | 0004a600:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | ||
| 0004a610:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0004a6 | 0004a620:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0004a6 | 0004a630:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0004a6 | 0004a640:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | ||
| 0004a6 | 0004a650:·3933·223e·3c74·6162·6c65·2063·6c61·7373··93"><table·class | ||
| 0004a6 | 0004a660:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0004a6 | 0004a670:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0004a6 | 0004a680:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0004a6 | 0004a690:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0004a6 | 0004a6a0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0004a6a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004a6b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0004a6c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0004a6 | 0004a6b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0004a6c0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0004a6d0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | |||
| 0004a6e0:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | |||
| 0004a6 | 0004a6f0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0004a | 0004a700:·7464·3e74·7275·653c·2f74·643e·3c2f·7472··td>true</td></tr | ||
| 0004a7 | 0004a710:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0004a7 | 0004a720:·793a·3c2f·7468·3e3c·7464·3e64·6973·6162··y:</th><td>disab | ||
| 0004a7 | 0004a730:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0004a7 | 0004a740:·626c·653e·3c70·7265·3e3c·636f·6465·3e61··ble><pre><code>a | ||
| 0004a7 | 0004a750:·7069·5665·7273·696f·6e3a·206d·6163·6869··piVersion:·machi | ||
| 0004a7 | 0004a760:·6e65·636f·6e66·6967·7572·6174·696f·6e2e··neconfiguration. | ||
| 0004a7 | 0004a770:·6f70·656e·7368·6966·742e·696f·2f76·310a··openshift.io/v1. | ||
| 0004a7 | 0004a780:·6b69·6e64·3a20·4d61·6368·696e·6543·6f6e··kind:·MachineCon | ||
| 0004a7 | 0004a790:·6669·670a·7370·6563·3a0a·2020·636f·6e66··fig.spec:.··conf | ||
| 0004a7 | 0004a7a0:·6967·3a0a·2020·2020·6967·6e69·7469·6f6e··ig:.····ignition | ||
| 0004a7 | 0004a7b0:·3a0a·2020·2020·2020·7665·7273·696f·6e3a··:.······version: | ||
| 0004a7 | 0004a7c0:·2033·2e31·2e30·0a20·2020·2073·7973·7465···3.1.0.····syste | ||
| 0004a7 | 0004a7d0:·6d64·3a0a·2020·2020·2020·756e·6974·733a··md:.······units: | ||
| 0004a7d0:·6974·733a·0a20·2020·2020·202d·206e·616d··its:.······-·nam | |||
| 0004a7e0:·653a·2064·6562·7567·2d73·6865·6c6c·2e73··e:·debug-shell.s | |||
| 0004a7f0:·6572·7669·6365·0a20·2020·2020·2020·2065··ervice.········e | |||
| 0004a800:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0004a810:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0004a | 0004a7e0:·0a20·2020·2020·202d·206e·616d·653a·2064··.······-·name:·d | ||
| 0004a | 0004a7f0:·6562·7567·2d73·6865·6c6c·2e73·6572·7669··ebug-shell.servi | ||
| 0004a800:·6365·0a20·2020·2020·2020·2065·6e61·626c··ce.········enabl | |||
| 0004a810:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | |||
| 0004a820:·2020·6d61·736b·3a20·7472·7565·0a20·2020····mask:·true.··· | |||
| 0004a830:·2020·202d·206e·616d·653a·2064·6562·7567·····-·name:·debug | |||
| 0004a840:·2d73·6865·6c6c·2e73·6f63·6b65·740a·2020··-shell.socket.·· | |||
| 0004a8 | 0004a850:·2020·2020·2020·656e·6162·6c65·643a·2066········enabled:·f | ||
| 0004a8 | 0004a860:·616c·7365·0a20·2020·2020·2020·206d·6173··alse.········mas | ||
| 0004a8 | 0004a870:·6b3a·2074·7275·650a·3c2f·636f·6465·3e3c··k:·true.</code>< | ||
| 0004a8 | 0004a880:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0004a8 | 0004a890:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0004a8 | 0004a8a0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0004a8 | 0004a8b0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0004a8 | 0004a8c0:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | ||
| 0004a8 | 0004a8d0:·3934·2220·7461·6269·6e64·6578·3d22·3022··94"·tabindex="0" | ||
| 0004a8 | 0004a8e0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0004a8 | 0004a8f0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0004a | 0004a900:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0004a9 | 0004a910:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0004a9 | 0004a920:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0004a930:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0004a920:·6d65·6469·6174·696f·6e20·4b75·6265·726e··mediation·Kubern | |||
| 0004a930:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 0004a940:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | 0004a940:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0004a950:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | 0004a950:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0004a960:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | 0004a960:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0004a970:·2269·646d·3733·3934·223e·3c74·6162·6c65··"idm7394"><table | 0004a970:·2269·646d·3733·3934·223e·3c74·6162·6c65··"idm7394"><table | ||
| 0004a980:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | 0004a980:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0004a990:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | 0004a990:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0004a9a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | 0004a9a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| Offset 34735, 66 lines modified | Offset 34735, 66 lines modified | ||
| 00087ae0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00087ae0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00087af0:·3831·3338·2220·7461·6269·6e64·6578·3d22··8138"·tabindex=" | 00087af0:·3831·3338·2220·7461·6269·6e64·6578·3d22··8138"·tabindex=" | ||
| 00087b00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00087b00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00087b10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00087b10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00087b20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00087b20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00087b30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00087b30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00087b40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00087b40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00087b50:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 00087b60:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 00087b70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00087b80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00087b90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00087ba0:·646d·3138·3133·3822·3e3c·7461·626c·6520··dm18138"><table· | |||
| 00087bb0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00087bc0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00087bd0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00087be0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00087bf0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00087c00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00087c10:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00087c20:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00087c30:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | |||
| 00087c40:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00087c50:·2f74·683e·3c74·643e·7472·7565·3c2f·7464··/th><td>true</td | |||
| 00087c60:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00087c70:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00087c80:·6469·7361·626c·653c·2f74·643e·3c2f·7472··disable</td></tr | |||
| 00087c90:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00087ca0:·6f64·653e·6170·6956·6572·7369·6f6e·3a20··ode>apiVersion:· | |||
| 00087cb0:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 00087cc0:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 00087cd0:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 00087ce0:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| 00087cf0:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | |||
| Max diff block lines reached; 8582/25634 bytes (33.48%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate-rev-4 | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate-rev-4 |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 429, 15 lines modified | Offset 429, 15 lines modified | ||
| 429 | Identifiers:·CCE-82496-1 | 429 | Identifiers:·CCE-82496-1 |
| 430 | ·············_\x8c_\x8u_\x8i····3.4.5 | 430 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 441 | apiVersion:·machineconfiguration.openshift.io/v1 | 441 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 442 | kind:·MachineConfig | 442 | kind:·MachineConfig |
| 443 | spec: | 443 | spec: |
| Offset 448, 15 lines modified | Offset 448, 15 lines modified | ||
| 448 | ······units: | 448 | ······units: |
| 449 | ······-·name:·debug-shell.service | 449 | ······-·name:·debug-shell.service |
| 450 | ········enabled:·false | 450 | ········enabled:·false |
| 451 | ········mask:·true | 451 | ········mask:·true |
| 452 | ······-·name:·debug-shell.socket | 452 | ······-·name:·debug-shell.socket |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 460 | apiVersion:·machineconfiguration.openshift.io/v1 | 460 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 461 | kind:·MachineConfig | 461 | kind:·MachineConfig |
| 462 | spec: | 462 | spec: |
| Offset 1879, 15 lines modified | Offset 1879, 15 lines modified | ||
| 1879 | ············_\x8c_\x8u_\x8i············3.1.16 | 1879 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1891 | apiVersion:·machineconfiguration.openshift.io/v1 | 1891 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1892 | kind:·MachineConfig | 1892 | kind:·MachineConfig |
| 1893 | spec: | 1893 | spec: |
| Offset 1898, 15 lines modified | Offset 1898, 15 lines modified | ||
| 1898 | ······units: | 1898 | ······units: |
| 1899 | ······-·name:·bluetooth.service | 1899 | ······-·name:·bluetooth.service |
| 1900 | ········enabled:·false | 1900 | ········enabled:·false |
| 1901 | ········mask:·true | 1901 | ········mask:·true |
| 1902 | ······-·name:·bluetooth.socket | 1902 | ······-·name:·bluetooth.socket |
| 1903 | ········enabled:·false | 1903 | ········enabled:·false |
| 1904 | ········mask:·true | 1904 | ········mask:·true |
| 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1910 | apiVersion:·machineconfiguration.openshift.io/v1 | 1910 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1911 | kind:·MachineConfig | 1911 | kind:·MachineConfig |
| 1912 | spec: | 1912 | spec: |
| Offset 2215, 15 lines modified | Offset 2215, 15 lines modified | ||
| 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2227 | apiVersion:·machineconfiguration.openshift.io/v1 | 2227 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2228 | kind:·MachineConfig | 2228 | kind:·MachineConfig |
| 2229 | spec: | 2229 | spec: |
| Offset 2234, 15 lines modified | Offset 2234, 15 lines modified | ||
| 2234 | ······units: | 2234 | ······units: |
| 2235 | ······-·name:·autofs.service | 2235 | ······-·name:·autofs.service |
| 2236 | ········enabled:·false | 2236 | ········enabled:·false |
| 2237 | ········mask:·true | 2237 | ········mask:·true |
| 2238 | ······-·name:·autofs.socket | 2238 | ······-·name:·autofs.socket |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2246 | apiVersion:·machineconfiguration.openshift.io/v1 | 2246 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2247 | kind:·MachineConfig | 2247 | kind:·MachineConfig |
| 2248 | spec: | 2248 | spec: |
| Offset 14357, 15 lines modified | Offset 14357, 15 lines modified | ||
| 00038140:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00038140:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00038150:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00038150:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038160:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038160:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038170:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038170:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038180:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038180:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038190:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038190:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 000381a0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 000381a0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 000381b0:·6f66·2032·3032·342d·3131·2d30·3 | 000381b0:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 000381c0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 000381c0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000381d0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000381d0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000381e0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000381e0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000381f0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000381f0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00038200:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00038200:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00038210:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00038210:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00038220:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00038220:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 19033, 67 lines modified | Offset 19033, 67 lines modified | ||
| 0004a580:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0004a580:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0004a590:·3d22·2369·646d·3733·3933·2220·7461·6269··="#idm7393"·tabi | 0004a590:·3d22·2369·646d·3733·3933·2220·7461·6269··="#idm7393"·tabi | ||
| 0004a5a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0004a5a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0004a5b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0004a5b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0004a5c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0004a5c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0004a5d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0004a5d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0004a5e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0004a5e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0004a5f0:·223e·5265·6d65·6469·6174·696f·6e20· | 0004a5f0:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | ||
| 0004a600:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0004a6 | 0004a610:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0004a6 | 0004a620:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0004a6 | 0004a630:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0004a6 | 0004a640:·2069·643d·2269·646d·3733·3933·223e·3c74···id="idm7393"><t | ||
| 0004a6 | 0004a650:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0004a6 | 0004a660:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0004a6 | 0004a670:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0004a6 | 0004a680:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0004a6 | 0004a690:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0004a6 | 0004a6a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0004a6a0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004a6b0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0004a6c0:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0004a6 | 0004a6b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0004a6c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0004a6d0:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0004a6e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004a6 | 0004a6f0:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | ||
| 0004a | 0004a700:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0004a7 | 0004a710:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0004a7 | 0004a720:·3e3c·7464·3e64·6973·6162·6c65·3c2f·7464··><td>disable</td | ||
| 0004a7 | 0004a730:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0004a7 | 0004a740:·7265·3e3c·636f·6465·3e61·7069·5665·7273··re><code>apiVers | ||
| 0004a7 | 0004a750:·696f·6e3a·206d·6163·6869·6e65·636f·6e66··ion:·machineconf | ||
| 0004a7 | 0004a760:·6967·7572·6174·696f·6e2e·6f70·656e·7368··iguration.opensh | ||
| 0004a7 | 0004a770:·6966·742e·696f·2f76·310a·6b69·6e64·3a20··ift.io/v1.kind:· | ||
| 0004a7 | 0004a780:·4d61·6368·696e·6543·6f6e·6669·670a·7370··MachineConfig.sp | ||
| 0004a7 | 0004a790:·6563·3a0a·2020·636f·6e66·6967·3a0a·2020··ec:.··config:.·· | ||
| 0004a7 | 0004a7a0:·2020·6967·6e69·7469·6f6e·3a0a·2020·2020····ignition:.···· | ||
| 0004a7 | 0004a7b0:·2020·7665·7273·696f·6e3a·2033·2e31·2e30····version:·3.1.0 | ||
| 0004a7 | 0004a7c0:·0a20·2020·2073·7973·7465·6d64·3a0a·2020··.····systemd:.·· | ||
| 0004a7 | 0004a7d0:·2020·2020·756e·6974·733a·0a20·2020·2020······units:.····· | ||
| 0004a7d0:·2020·2020·202d·206e·616d·653a·2064·6562·······-·name:·deb | |||
| 0004a7e0:·7567·2d73·6865·6c6c·2e73·6572·7669·6365··ug-shell.service | |||
| 0004a7f0:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 0004a800:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | |||
| 0004a810:·6d61·736b·3a20·7472·7565·0a20·2020·2020··mask:·true.····· | |||
| 0004a | 0004a7e0:·202d·206e·616d·653a·2064·6562·7567·2d73···-·name:·debug-s | ||
| 0004a | 0004a7f0:·6865·6c6c·2e73·6572·7669·6365·0a20·2020··hell.service.··· | ||
| 0004a8 | 0004a800:·2020·2020·2065·6e61·626c·6564·3a20·6661·······enabled:·fa | ||
| 0004a8 | 0004a810:·6c73·650a·2020·2020·2020·2020·6d61·736b··lse.········mask | ||
| 0004a820:·3a20·7472·7565·0a20·2020·2020·202d·206e··:·true.······-·n | |||
| 0004a830:·616d·653a·2064·6562·7567·2d73·6865·6c6c··ame:·debug-shell | |||
| 0004a840:·2e73·6f63·6b65·740a·2020·2020·2020·2020··.socket.········ | |||
| 0004a850:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | |||
| 0004a860:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | |||
| 0004a8 | 0004a870:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | ||
| 0004a8 | 0004a880:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0004a8 | 0004a890:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0004a8 | 0004a8a0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0004a8 | 0004a8b0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0004a8 | 0004a8c0:·6574·3d22·2369·646d·3733·3934·2220·7461··et="#idm7394"·ta | ||
| 0004a8 | 0004a8d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0004a8 | 0004a8e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0004a8 | 0004a8f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0004a | 0004a900:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0004a9 | 0004a910:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0004a9 | 0004a920:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0004a920:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 0004a930:· | 0004a930:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0004a940:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | 0004a940:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0004a950:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | 0004a950:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0004a960:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | 0004a960:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | ||
| 0004a970:·3934·223e·3c74·6162·6c65·2063·6c61·7373··94"><table·class | 0004a970:·3934·223e·3c74·6162·6c65·2063·6c61·7373··94"><table·class | ||
| 0004a980:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | 0004a980:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0004a990:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | 0004a990:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0004a9a0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | 0004a9a0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| Offset 34735, 66 lines modified | Offset 34735, 66 lines modified | ||
| 00087ae0:·6765·743d·2223·6964·6d31·3831·3338·2220··get="#idm18138"· | 00087ae0:·6765·743d·2223·6964·6d31·3831·3338·2220··get="#idm18138"· | ||
| 00087af0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 00087af0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 00087b00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 00087b00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 00087b10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 00087b10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 00087b20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 00087b20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 00087b30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 00087b30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 00087b40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 00087b40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 00087b50:·6e20·4b75·6265·726e·6574·6573·2073·6e69··n·Kubernetes·sni | |||
| 00087b60:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00087b70:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00087b80:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00087b90:·7073·6522·2069·643d·2269·646d·3138·3133··pse"·id="idm1813 | |||
| 00087ba0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 00087bb0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00087bc0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00087bd0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00087be0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00087bf0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00087c00:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00087c10:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00087c20:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | |||
| 00087c30:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00087c40:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00087c50:·643e·7472·7565·3c2f·7464·3e3c·2f74·723e··d>true</td></tr> | |||
| 00087c60:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00087c70:·3a3c·2f74·683e·3c74·643e·6469·7361·626c··:</th><td>disabl | |||
| 00087c80:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00087c90:·6c65·3e3c·7072·653e·3c63·6f64·653e·6170··le><pre><code>ap | |||
| 00087ca0:·6956·6572·7369·6f6e·3a20·6d61·6368·696e··iVersion:·machin | |||
| 00087cb0:·6563·6f6e·6669·6775·7261·7469·6f6e·2e6f··econfiguration.o | |||
| 00087cc0:·7065·6e73·6869·6674·2e69·6f2f·7631·0a6b··penshift.io/v1.k | |||
| 00087cd0:·696e·643a·204d·6163·6869·6e65·436f·6e66··ind:·MachineConf | |||
| 00087ce0:·6967·0a73·7065·633a·0a20·2063·6f6e·6669··ig.spec:.··confi | |||
| 00087cf0:·673a·0a20·2020·2069·676e·6974·696f·6e3a··g:.····ignition: | |||
| Max diff block lines reached; 8444/25634 bytes (32.94%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 429, 15 lines modified | Offset 429, 15 lines modified | ||
| 429 | Identifiers:·CCE-82496-1 | 429 | Identifiers:·CCE-82496-1 |
| 430 | ·············_\x8c_\x8u_\x8i····3.4.5 | 430 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 441 | apiVersion:·machineconfiguration.openshift.io/v1 | 441 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 442 | kind:·MachineConfig | 442 | kind:·MachineConfig |
| 443 | spec: | 443 | spec: |
| Offset 448, 15 lines modified | Offset 448, 15 lines modified | ||
| 448 | ······units: | 448 | ······units: |
| 449 | ······-·name:·debug-shell.service | 449 | ······-·name:·debug-shell.service |
| 450 | ········enabled:·false | 450 | ········enabled:·false |
| 451 | ········mask:·true | 451 | ········mask:·true |
| 452 | ······-·name:·debug-shell.socket | 452 | ······-·name:·debug-shell.socket |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 460 | apiVersion:·machineconfiguration.openshift.io/v1 | 460 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 461 | kind:·MachineConfig | 461 | kind:·MachineConfig |
| 462 | spec: | 462 | spec: |
| Offset 1879, 15 lines modified | Offset 1879, 15 lines modified | ||
| 1879 | ············_\x8c_\x8u_\x8i············3.1.16 | 1879 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1891 | apiVersion:·machineconfiguration.openshift.io/v1 | 1891 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1892 | kind:·MachineConfig | 1892 | kind:·MachineConfig |
| 1893 | spec: | 1893 | spec: |
| Offset 1898, 15 lines modified | Offset 1898, 15 lines modified | ||
| 1898 | ······units: | 1898 | ······units: |
| 1899 | ······-·name:·bluetooth.service | 1899 | ······-·name:·bluetooth.service |
| 1900 | ········enabled:·false | 1900 | ········enabled:·false |
| 1901 | ········mask:·true | 1901 | ········mask:·true |
| 1902 | ······-·name:·bluetooth.socket | 1902 | ······-·name:·bluetooth.socket |
| 1903 | ········enabled:·false | 1903 | ········enabled:·false |
| 1904 | ········mask:·true | 1904 | ········mask:·true |
| 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1910 | apiVersion:·machineconfiguration.openshift.io/v1 | 1910 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1911 | kind:·MachineConfig | 1911 | kind:·MachineConfig |
| 1912 | spec: | 1912 | spec: |
| Offset 2215, 15 lines modified | Offset 2215, 15 lines modified | ||
| 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2227 | apiVersion:·machineconfiguration.openshift.io/v1 | 2227 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2228 | kind:·MachineConfig | 2228 | kind:·MachineConfig |
| 2229 | spec: | 2229 | spec: |
| Offset 2234, 15 lines modified | Offset 2234, 15 lines modified | ||
| 2234 | ······units: | 2234 | ······units: |
| 2235 | ······-·name:·autofs.service | 2235 | ······-·name:·autofs.service |
| 2236 | ········enabled:·false | 2236 | ········enabled:·false |
| 2237 | ········mask:·true | 2237 | ········mask:·true |
| 2238 | ······-·name:·autofs.socket | 2238 | ······-·name:·autofs.socket |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2246 | apiVersion:·machineconfiguration.openshift.io/v1 | 2246 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2247 | kind:·MachineConfig | 2247 | kind:·MachineConfig |
| 2248 | spec: | 2248 | spec: |
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037eb0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ec0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ec0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ed0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ed0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ee0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ee0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ef0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ef0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037f00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f10:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037f10:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037f20:·2d31·312d·303 | 00037f20:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037f30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 18992, 66 lines modified | Offset 18992, 66 lines modified | ||
| 0004a2f0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0004a2f0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0004a300:·3339·3322·2074·6162·696e·6465·783d·2230··393"·tabindex="0 | 0004a300:·3339·3322·2074·6162·696e·6465·783d·2230··393"·tabindex="0 | ||
| 0004a310:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0004a310:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0004a320:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0004a320:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0004a330:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0004a330:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0004a340:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0004a340:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0004a350:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0004a350:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0004a360:·6961·7469·6f6e·20 | 0004a360:·6961·7469·6f6e·204b·7562·6572·6e65·7465··iation·Kubernete | ||
| 0004a370:·7320·736e·6970·7065·7420·e287·b23c·2f61··s·snippet·...</a | |||
| 0004a3 | 0004a380:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0004a3 | 0004a390:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0004a3 | 0004a3a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0004a3 | 0004a3b0:·6d37·3339·3322·3e3c·7461·626c·6520·636c··m7393"><table·cl | ||
| 0004a3 | 0004a3c0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0004a3 | 0004a3d0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0004a3 | 0004a3e0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0004a3 | 0004a3f0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0004a | 0004a400:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0004a4 | 0004a410:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0004a420:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0004a430:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 0004a440:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 0004a450:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0004a460:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 0004a4 | 0004a470:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0004a420:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0004a430:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0004a440:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0004a450:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0004a460:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0004a4 | 0004a480:·7465·6779·3a3c·2f74·683e·3c74·643e·6469··tegy:</th><td>di | ||
| 0004a4 | 0004a490:·7361·626c·653c·2f74·643e·3c2f·7472·3e3c··sable</td></tr>< | ||
| 0004a4 | 0004a4a0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0004a4 | 0004a4b0:·653e·6170·6956·6572·7369·6f6e·3a20·6d61··e>apiVersion:·ma | ||
| 0004a4 | 0004a4c0:·6368·696e·6563·6f6e·6669·6775·7261·7469··chineconfigurati | ||
| 0004a4 | 0004a4d0:·6f6e·2e6f·7065·6e73·6869·6674·2e69·6f2f··on.openshift.io/ | ||
| 0004a4 | 0004a4e0:·7631·0a6b·696e·643a·204d·6163·6869·6e65··v1.kind:·Machine | ||
| 0004a4 | 0004a4f0:·436f·6e66·6967·0a73·7065·633a·0a20·2063··Config.spec:.··c | ||
| 0004a | 0004a500:·6f6e·6669·673a·0a20·2020·2069·676e·6974··onfig:.····ignit | ||
| 0004a5 | 0004a510:·696f·6e3a·0a20·2020·2020·2076·6572·7369··ion:.······versi | ||
| 0004a5 | 0004a520:·6f6e·3a20·332e·312e·300a·2020·2020·7379··on:·3.1.0.····sy | ||
| 0004a5 | 0004a530:·7374·656d·643a·0a20·2020·2020·2075·6e69··stemd:.······uni | ||
| 0004a530:·2075·6e69·7473·3a0a·2020·2020·2020·2d20···units:.······-· | |||
| 0004a540:·6e61·6d65·3a20·6465·6275·672d·7368·656c··name:·debug-shel | |||
| 0004a550:·6c2e·7365·7276·6963·650a·2020·2020·2020··l.service.······ | |||
| 0004a560:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0004a570:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0004a5 | 0004a540:·7473·3a0a·2020·2020·2020·2d20·6e61·6d65··ts:.······-·name | ||
| 0004a5 | 0004a550:·3a20·6465·6275·672d·7368·656c·6c2e·7365··:·debug-shell.se | ||
| 0004a5 | 0004a560:·7276·6963·650a·2020·2020·2020·2020·656e··rvice.········en | ||
| 0004a570:·6162·6c65·643a·2066·616c·7365·0a20·2020··abled:·false.··· | |||
| 0004a580:·2020·2020·206d·6173·6b3a·2074·7275·650a·······mask:·true. | |||
| 0004a590:·2020·2020·2020·2d20·6e61·6d65·3a20·6465········-·name:·de | |||
| 0004a5a0:·6275·672d·7368·656c·6c2e·736f·636b·6574··bug-shell.socket | |||
| 0004a5b0:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 0004a5 | 0004a5c0:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | ||
| 0004a5 | 0004a5d0:·6d61·736b·3a20·7472·7565·0a3c·2f63·6f64··mask:·true.</cod | ||
| 0004a5 | 0004a5e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0004a5 | 0004a5f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0004a | 0004a600:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0004a6 | 0004a610:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0004a6 | 0004a620:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0004a6 | 0004a630:·6d37·3339·3422·2074·6162·696e·6465·783d··m7394"·tabindex= | ||
| 0004a6 | 0004a640:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0004a6 | 0004a650:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0004a6 | 0004a660:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0004a6 | 0004a670:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0004a6 | 0004a680:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0004a690:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 0004a680:·3e52·656d·6564·6961·7469·6f6e·204b·7562··>Remediation·Kub | |||
| 0004a690:·6572·6e65·7465·7320·736e·6970·7065·7420··ernetes·snippet· | |||
| 0004a6a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | 0004a6a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0004a6b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | 0004a6b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0004a6c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | 0004a6c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0004a6d0:·6964·3d22·6964·6d37·3339·3422·3e3c·7461··id="idm7394"><ta | 0004a6d0:·6964·3d22·6964·6d37·3339·3422·3e3c·7461··id="idm7394"><ta | ||
| 0004a6e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | 0004a6e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0004a6f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | 0004a6f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0004a700:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | 0004a700:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| Offset 34693, 66 lines modified | Offset 34693, 66 lines modified | ||
| 00087840:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00087840:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 00087850:·646d·3138·3133·3822·2074·6162·696e·6465··dm18138"·tabinde | 00087850:·646d·3138·3133·3822·2074·6162·696e·6465··dm18138"·tabinde | ||
| 00087860:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00087860:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00087870:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00087870:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00087880:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00087880:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00087890:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00087890:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 000878a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 000878a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 000878b0:·656d·6564·6961·7469·6f6e·204b·7562·6572··emediation·Kuber | |||
| 000878c0:·6e65·7465·7320·736e·6970·7065·7420·e287··netes·snippet·.. | |||
| 000878d0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000878e0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000878f0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00087900:·3d22·6964·6d31·3831·3338·223e·3c74·6162··="idm18138"><tab | |||
| 00087910:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00087920:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00087930:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00087940:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00087950:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00087960:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00087970:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00087980:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00087990:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | |||
| 000879a0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 000879b0:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 000879c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000879d0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 000879e0:·7464·3e64·6973·6162·6c65·3c2f·7464·3e3c··td>disable</td>< | |||
| 000879f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00087a00:·3e3c·636f·6465·3e61·7069·5665·7273·696f··><code>apiVersio | |||
| 00087a10:·6e3a·206d·6163·6869·6e65·636f·6e66·6967··n:·machineconfig | |||
| 00087a20:·7572·6174·696f·6e2e·6f70·656e·7368·6966··uration.openshif | |||
| 00087a30:·742e·696f·2f76·310a·6b69·6e64·3a20·4d61··t.io/v1.kind:·Ma | |||
| Max diff block lines reached; 8582/25634 bytes (33.48%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Infrastructure·Protection·(CIP)·cybersecurity·standards·profile | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Infrastructure·Protection·(CIP)·cybersecurity·standards·profile |
| 46 | ··············for·Red·Hat·Enterprise·Linux·CoreOS | 46 | ··············for·Red·Hat·Enterprise·Linux·CoreOS |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_nerc-cip | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_nerc-cip |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 49 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 418, 15 lines modified | Offset 418, 15 lines modified | ||
| 418 | Identifiers:·CCE-82496-1 | 418 | Identifiers:·CCE-82496-1 |
| 419 | ·············_\x8c_\x8u_\x8i····3.4.5 | 419 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 420 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 420 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 421 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 421 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 422 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 422 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 423 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 423 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 424 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 424 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 430 | apiVersion:·machineconfiguration.openshift.io/v1 | 430 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 431 | kind:·MachineConfig | 431 | kind:·MachineConfig |
| 432 | spec: | 432 | spec: |
| Offset 437, 15 lines modified | Offset 437, 15 lines modified | ||
| 437 | ······units: | 437 | ······units: |
| 438 | ······-·name:·debug-shell.service | 438 | ······-·name:·debug-shell.service |
| 439 | ········enabled:·false | 439 | ········enabled:·false |
| 440 | ········mask:·true | 440 | ········mask:·true |
| 441 | ······-·name:·debug-shell.socket | 441 | ······-·name:·debug-shell.socket |
| 442 | ········enabled:·false | 442 | ········enabled:·false |
| 443 | ········mask:·true | 443 | ········mask:·true |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 449 | apiVersion:·machineconfiguration.openshift.io/v1 | 449 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 450 | kind:·MachineConfig | 450 | kind:·MachineConfig |
| 451 | spec: | 451 | spec: |
| Offset 1868, 15 lines modified | Offset 1868, 15 lines modified | ||
| 1868 | ············_\x8c_\x8u_\x8i············3.1.16 | 1868 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1869 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1869 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1870 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1870 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1871 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1871 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1872 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1872 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1873 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1873 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1874 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1874 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1875 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1875 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1876 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1876 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1877 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1877 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1878 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1878 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1879 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1879 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1880 | apiVersion:·machineconfiguration.openshift.io/v1 | 1880 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1881 | kind:·MachineConfig | 1881 | kind:·MachineConfig |
| 1882 | spec: | 1882 | spec: |
| Offset 1887, 15 lines modified | Offset 1887, 15 lines modified | ||
| 1887 | ······units: | 1887 | ······units: |
| 1888 | ······-·name:·bluetooth.service | 1888 | ······-·name:·bluetooth.service |
| 1889 | ········enabled:·false | 1889 | ········enabled:·false |
| 1890 | ········mask:·true | 1890 | ········mask:·true |
| 1891 | ······-·name:·bluetooth.socket | 1891 | ······-·name:·bluetooth.socket |
| 1892 | ········enabled:·false | 1892 | ········enabled:·false |
| 1893 | ········mask:·true | 1893 | ········mask:·true |
| 1894 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1894 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1895 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1895 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1896 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1896 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1897 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1897 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1898 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1898 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1899 | apiVersion:·machineconfiguration.openshift.io/v1 | 1899 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1900 | kind:·MachineConfig | 1900 | kind:·MachineConfig |
| 1901 | spec: | 1901 | spec: |
| Offset 2204, 15 lines modified | Offset 2204, 15 lines modified | ||
| 2204 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2204 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2205 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2205 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2206 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2206 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2207 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2207 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2208 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2208 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2209 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2209 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2216 | apiVersion:·machineconfiguration.openshift.io/v1 | 2216 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2217 | kind:·MachineConfig | 2217 | kind:·MachineConfig |
| 2218 | spec: | 2218 | spec: |
| Offset 2223, 15 lines modified | Offset 2223, 15 lines modified | ||
| 2223 | ······units: | 2223 | ······units: |
| 2224 | ······-·name:·autofs.service | 2224 | ······-·name:·autofs.service |
| 2225 | ········enabled:·false | 2225 | ········enabled:·false |
| 2226 | ········mask:·true | 2226 | ········mask:·true |
| 2227 | ······-·name:·autofs.socket | 2227 | ······-·name:·autofs.socket |
| 2228 | ········enabled:·false | 2228 | ········enabled:·false |
| 2229 | ········mask:·true | 2229 | ········mask:·true |
| 2230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2235 | apiVersion:·machineconfiguration.openshift.io/v1 | 2235 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2236 | kind:·MachineConfig | 2236 | kind:·MachineConfig |
| 2237 | spec: | 2237 | spec: |
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cf0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d00:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d00:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d10:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d10:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d20:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d20:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d30:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d30:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d50:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037d50:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037d60:·3131·2d30·3 | 00037d60:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037d70:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d70:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d80:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d80:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d90:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d90:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037da0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037da0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037db0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037db0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037dc0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037dc0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037dd0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037dd0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 23044, 66 lines modified | Offset 23044, 66 lines modified | ||
| 0005a030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0005a030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0005a040:·3237·3032·3322·2074·6162·696e·6465·783d··27023"·tabindex= | 0005a040:·3237·3032·3322·2074·6162·696e·6465·783d··27023"·tabindex= | ||
| 0005a050:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0005a050:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0005a060:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0005a060:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0005a070:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0005a070:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0005a080:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0005a080:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0005a090:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0005a090:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0005a0a0:·6564·6961·7469·6f6e·20 | 0005a0a0:·6564·6961·7469·6f6e·204b·7562·6572·6e65··ediation·Kuberne | ||
| 0005a0b0:·7465·7320·736e·6970·7065·7420·e287·b23c··tes·snippet·...< | |||
| 0005a0 | 0005a0c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0005a0 | 0005a0d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0005a0 | 0005a0e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0005a0 | 0005a0f0:·6964·6d32·3730·3233·223e·3c74·6162·6c65··idm27023"><table | ||
| 0005a | 0005a100:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0005a1 | 0005a110:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0005a1 | 0005a120:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0005a1 | 0005a130:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0005a1 | 0005a140:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0005a1 | 0005a150:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0005a160:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0005a170:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0005a180:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 0005a190:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0005a1a0:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0005a1 | 0005a1b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0005a160:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0005a170:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0005a180:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0005a190:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 0005a1a0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0005a1 | 0005a1c0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0005a1 | 0005a1d0:·3e64·6973·6162·6c65·3c2f·7464·3e3c·2f74··>disable</td></t | ||
| 0005a1 | 0005a1e0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0005a1 | 0005a1f0:·636f·6465·3e61·7069·5665·7273·696f·6e3a··code>apiVersion: | ||
| 0005a | 0005a200:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | ||
| 0005a2 | 0005a210:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | ||
| 0005a2 | 0005a220:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | ||
| 0005a2 | 0005a230:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | ||
| 0005a2 | 0005a240:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | ||
| 0005a2 | 0005a250:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | ||
| 0005a2 | 0005a260:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | ||
| 0005a2 | 0005a270:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | ||
| 0005a2 | 0005a280:·756e·6974·733a·0a20·2020·2020·202d·206e··units:.······-·n | ||
| 0005a2 | 0005a290:·616d·653a·2073·7368·642e·7365·7276·6963··ame:·sshd.servic | ||
| 0005a2a0:·650a·2020·2020·2020·2020·656e·6162·6c65··e.········enable | |||
| 0005a2b0:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | |||
| 0005a2c0:·206d·6173·6b3a·2074·7275·650a·2020·2020···mask:·true.···· | |||
| 0005a2d0:·2020·2d20·6e61·6d65·3a20·7373·6864·2e73····-·name:·sshd.s | |||
| 0005a2 | 0005a2e0:·6f63·6b65·740a·2020·2020·2020·2020·656e··ocket.········en | ||
| 0005a2 | 0005a2f0:·6162·6c65·643a·2066·616c·7365·0a20·2020··abled:·false.··· | ||
| 0005a | 0005a300:·2020·2020·206d·6173·6b3a·2074·7275·650a·······mask:·true. | ||
| 0005a2c0:·2020·2020·2020·2d20·6e61·6d65·3a20·7373········-·name:·ss | |||
| 0005a2d0:·6864·2e73·6f63·6b65·740a·2020·2020·2020··hd.socket.······ | |||
| 0005a2e0:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0005a2f0:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0005a3 | 0005a310:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0005a3 | 0005a320:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0005a3 | 0005a330:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0005a3 | 0005a340:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0005a3 | 0005a350:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0005a3 | 0005a360:·3d22·2369·646d·3237·3032·3422·2074·6162··="#idm27024"·tab | ||
| 0005a3 | 0005a370:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0005a3 | 0005a380:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0005a3 | 0005a390:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0005a3 | 0005a3a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0005a3 | 0005a3b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0005a3 | 0005a3c0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | ||
| 0005a3c0:·6f6e·204b·7562·6572·6e65·7465·7320·736e··on·Kubernetes·sn | |||
| 0005a3d0:·6 | 0005a3d0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0005a3e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | 0005a3e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0005a3f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | 0005a3f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0005a400:·6170·7365·2220·6964·3d22·6964·6d32·3730··apse"·id="idm270 | 0005a400:·6170·7365·2220·6964·3d22·6964·6d32·3730··apse"·id="idm270 | ||
| 0005a410:·3234·223e·3c74·6162·6c65·2063·6c61·7373··24"><table·class | 0005a410:·3234·223e·3c74·6162·6c65·2063·6c61·7373··24"><table·class | ||
| 0005a420:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | 0005a420:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0005a430:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | 0005a430:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0005a440:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | 0005a440:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde |
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig-v1r1 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig-v1r1 |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| Offset 702, 15 lines modified | Offset 702, 15 lines modified | ||
| 702 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 702 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 703 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 703 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 704 | Severity: ···high | 704 | Severity: ···high |
| 705 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 705 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 706 | Identifiers:·CCE-86189-8 | 706 | Identifiers:·CCE-86189-8 |
| 707 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 707 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 708 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 708 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 709 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 709 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 710 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 710 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 711 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 711 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 712 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 712 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 713 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 713 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 714 | apiVersion:·machineconfiguration.openshift.io/v1 | 714 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 715 | kind:·MachineConfig | 715 | kind:·MachineConfig |
| 716 | spec: | 716 | spec: |
| Offset 721, 15 lines modified | Offset 721, 15 lines modified | ||
| 721 | ······units: | 721 | ······units: |
| 722 | ······-·name:·sshd.service | 722 | ······-·name:·sshd.service |
| 723 | ········enabled:·false | 723 | ········enabled:·false |
| 724 | ········mask:·true | 724 | ········mask:·true |
| 725 | ······-·name:·sshd.socket | 725 | ······-·name:·sshd.socket |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 733 | apiVersion:·machineconfiguration.openshift.io/v1 | 733 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 734 | kind:·MachineConfig | 734 | kind:·MachineConfig |
| 735 | spec: | 735 | spec: |
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037ce0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cf0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cf0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037d00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037d00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037d10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037d10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d50:·6173·206f·6620·3230·3234·2d31·312d·303 | 00037d50:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00037d60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037da0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037da0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037db0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037db0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037dc0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037dc0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 23044, 65 lines modified | Offset 23044, 65 lines modified | ||
| 0005a030:·6172·6765·743d·2223·6964·6d32·3730·3233··arget="#idm27023 | 0005a030:·6172·6765·743d·2223·6964·6d32·3730·3233··arget="#idm27023 | ||
| 0005a040:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0005a040:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0005a050:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0005a050:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0005a060:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0005a060:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0005a070:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0005a070:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0005a080:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0005a080:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0005a090:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0005a090:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0005a0a0:·696f·6e20· | 0005a0a0:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | ||
| 0005a0b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0005a0 | 0005a0c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0005a0 | 0005a0d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0005a0 | 0005a0e0:·6c61·7073·6522·2069·643d·2269·646d·3237··lapse"·id="idm27 | ||
| 0005a0 | 0005a0f0:·3032·3322·3e3c·7461·626c·6520·636c·6173··023"><table·clas | ||
| 0005a | 0005a100:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0005a1 | 0005a110:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0005a1 | 0005a120:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0005a1 | 0005a130:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0005a1 | 0005a140:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0005a1 | 0005a150:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0005a1 | 0005a160:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0005a1 | 0005a170:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0005a1 | 0005a180:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0005a1 | 0005a190:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0005a1 | 0005a1a0:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | ||
| 0005a1 | 0005a1b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0005a1 | 0005a1c0:·6779·3a3c·2f74·683e·3c74·643e·6469·7361··gy:</th><td>disa | ||
| 0005a1 | 0005a1d0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0005a1 | 0005a1e0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0005a1 | 0005a1f0:·6170·6956·6572·7369·6f6e·3a20·6d61·6368··apiVersion:·mach | ||
| 0005a | 0005a200:·696e·6563·6f6e·6669·6775·7261·7469·6f6e··ineconfiguration | ||
| 0005a2 | 0005a210:·2e6f·7065·6e73·6869·6674·2e69·6f2f·7631··.openshift.io/v1 | ||
| 0005a2 | 0005a220:·0a6b·696e·643a·204d·6163·6869·6e65·436f··.kind:·MachineCo | ||
| 0005a2 | 0005a230:·6e66·6967·0a73·7065·633a·0a20·2063·6f6e··nfig.spec:.··con | ||
| 0005a2 | 0005a240:·6669·673a·0a20·2020·2069·676e·6974·696f··fig:.····ignitio | ||
| 0005a2 | 0005a250:·6e3a·0a20·2020·2020·2076·6572·7369·6f6e··n:.······version | ||
| 0005a2 | 0005a260:·3a20·332e·312e·300a·2020·2020·7379·7374··:·3.1.0.····syst | ||
| 0005a2 | 0005a270:·656d·643a·0a20·2020·2020·2075·6e69·7473··emd:.······units | ||
| 0005a2 | 0005a280:·3a0a·2020·2020·2020·2d20·6e61·6d65·3a20··:.······-·name:· | ||
| 0005a2 | 0005a290:·7373·6864·2e73·6572·7669·6365·0a20·2020··sshd.service.··· | ||
| 0005a2a0:·2020·2020·2065·6e61·626c·6564·3a20·6661·······enabled:·fa | |||
| 0005a2b0:·6c73·650a·2020·2020·2020·2020·6d61·736b··lse.········mask | |||
| 0005a2c0:·3a20·7472·7565·0a20·2020·2020·202d·206e··:·true.······-·n | |||
| 0005a2d0:·616d·653a·2073·7368·642e·736f·636b·6574··ame:·sshd.socket | |||
| 0005a2 | 0005a2e0:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | ||
| 0005a2 | 0005a2f0:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | ||
| 0005a2b0:·6d61·736b·3a20·7472·7565·0a20·2020·2020··mask:·true.····· | |||
| 0005a2c0:·202d·206e·616d·653a·2073·7368·642e·736f···-·name:·sshd.so | |||
| 0005a2d0:·636b·6574·0a20·2020·2020·2020·2065·6e61··cket.········ena | |||
| 0005a2e0:·626c·6564·3a20·6661·6c73·650a·2020·2020··bled:·false.···· | |||
| 0005a | 0005a300:·6d61·736b·3a20·7472·7565·0a3c·2f63·6f64··mask:·true.</cod | ||
| 0005a3 | 0005a310:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0005a3 | 0005a320:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0005a3 | 0005a330:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0005a3 | 0005a340:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0005a3 | 0005a350:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0005a3 | 0005a360:·6d32·3730·3234·2220·7461·6269·6e64·6578··m27024"·tabindex | ||
| 0005a3 | 0005a370:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0005a3 | 0005a380:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0005a3 | 0005a390:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0005a3 | 0005a3a0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0005a3 | 0005a3b0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0005a3c0:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0005a3b0:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | |||
| 0005a3c0:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0005a3d0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | 0005a3d0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0005a3e0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | 0005a3e0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0005a3f0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | 0005a3f0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0005a400:·2069·643d·2269·646d·3237·3032·3422·3e3c···id="idm27024">< | 0005a400:·2069·643d·2269·646d·3237·3032·3422·3e3c···id="idm27024">< | ||
| 0005a410:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | 0005a410:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0005a420:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | 0005a420:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0005a430:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | 0005a430:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· |
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| Offset 702, 15 lines modified | Offset 702, 15 lines modified | ||
| 702 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 702 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 703 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 703 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 704 | Severity: ···high | 704 | Severity: ···high |
| 705 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 705 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 706 | Identifiers:·CCE-86189-8 | 706 | Identifiers:·CCE-86189-8 |
| 707 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 707 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 708 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 708 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 709 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 709 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 710 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 710 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 711 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 711 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 712 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 712 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 713 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 713 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 714 | apiVersion:·machineconfiguration.openshift.io/v1 | 714 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 715 | kind:·MachineConfig | 715 | kind:·MachineConfig |
| 716 | spec: | 716 | spec: |
| Offset 721, 15 lines modified | Offset 721, 15 lines modified | ||
| 721 | ······units: | 721 | ······units: |
| 722 | ······-·name:·sshd.service | 722 | ······-·name:·sshd.service |
| 723 | ········enabled:·false | 723 | ········enabled:·false |
| 724 | ········mask:·true | 724 | ········mask:·true |
| 725 | ······-·name:·sshd.socket | 725 | ······-·name:·sshd.socket |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 733 | apiVersion:·machineconfiguration.openshift.io/v1 | 733 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 734 | kind:·MachineConfig | 734 | kind:·MachineConfig |
| 735 | spec: | 735 | spec: |
| Offset 14321, 15 lines modified | Offset 14321, 15 lines modified | ||
| 00037f00:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037f00:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f10:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f10:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f20:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f20:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f30:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f30:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f40:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f40:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f50:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f50:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f60:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f60:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f70:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00037f70:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00037f80:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f80:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f90:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f90:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037fa0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037fa0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fb0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fb0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fc0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fc0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fd0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fd0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fe0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fe0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15097, 234 lines modified | Offset 15097, 234 lines modified | ||
| 0003af80:·7461·7267·6574·3d22·2369·646d·3732·3530··target="#idm7250 | 0003af80:·7461·7267·6574·3d22·2369·646d·3732·3530··target="#idm7250 | ||
| 0003af90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003af90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003afa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003afa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003afb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003afb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003afc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003afc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003afd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003afd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003afe0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003afe0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003aff0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b000:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b010:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b020:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b030:·6522·2069·643d·2269·646d·3732·3530·223e··e"·id="idm7250"> | |||
| 0003b040:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b050:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003aff0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b000:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b010:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b020:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b030:·7365·2220·6964·3d22·6964·6d37·3235·3022··se"·id="idm7250" | |||
| 0003b040:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b050:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b060:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b0 | 0003b060:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b080:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b0 | 0003b070:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b080:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b090:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b0a0:· | 0003b0a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b0b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b0b0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b0c0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b0d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b0e0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b0f0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b100:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b110:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b120:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b130:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b140:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b150:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b160:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b170:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b180:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b190:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b1a0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b1b0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b1c0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b1d0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b1e0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b1f0:·2043·4345·2d39·3034·3737·2d31·0a20·202d···CCE-90477-1.··- | |||
| 0003b200:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b210:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b220:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b230:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b240:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b250:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b260:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b270:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b280:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b290:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b2a0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b2b0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b2c0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b2d0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b2e0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b2f0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b300:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b310:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b320:·2223·6964·6d37·3235·3122·2074·6162·696e··"#idm7251"·tabin | |||
| 0003b330:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b340:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b350:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b360:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b370:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b380:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b390:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b3a0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b3b0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b3c0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b3d0:·6964·6d37·3235·3122·3e3c·7461·626c·6520··idm7251"><table· | |||
| 0003b3e0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b3f0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b400:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b410:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b420:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003b0c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b0d0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b | 0003b0e0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b | 0003b0f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003b100:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b | 0003b110:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003b490:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b | 0003b120:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b130:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b140:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b150:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b160:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b170:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b180:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b190:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b1a0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b1b0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b1c0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b1d0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b1e0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b1f0:·6d37·3235·3122·2074·6162·696e·6465·783d··m7251"·tabindex= | |||
| 0003b200:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b210:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b220:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b230:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b240:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| Max diff block lines reached; 20750151/20782221 bytes (99.85%) of diff not shown. | |||
| Offset 14320, 15 lines modified | Offset 14320, 15 lines modified | ||
| 00037ef0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037ef0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f00:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f00:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f10:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f10:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f20:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f20:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f30:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f30:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f40:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f40:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f50:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f50:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f60:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00037f60:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00037f70:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f70:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f80:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f80:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f90:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f90:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fa0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fa0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fb0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fb0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fc0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fc0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fd0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fd0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15102, 235 lines modified | Offset 15102, 235 lines modified | ||
| 0003afd0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003afd0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003afe0:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | 0003afe0:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | ||
| 0003aff0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003aff0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b000:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b000:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b010:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b010:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b020:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b020:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b030:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b030:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b040:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b0 | 0003b040:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | ||
| 0003b050:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b060:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b070:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b080:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 0003b090:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b0a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b0b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b0c0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b0d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b0e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b0f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b100:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b110:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b120:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b130:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b140:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b150:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b160:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b170:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b180:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b190:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b1a0:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b1b0:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b1c0:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b1d0:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b1e0:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b1f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b200:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b210:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b220:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b230:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b240:·2369·646d·3732·3531·2220·7461·6269·6e64··#idm7251"·tabind | |||
| 0003b250:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b260:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b270:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b280:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b290:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b2a0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b2b0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b | 0003b2c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b070 | 0003b2d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003b2e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003b2f0:·3732·3531·223e·3c74·6162·6c65·2063·6c61··7251"><table·cla | ||
| 0003b | 0003b300:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003b310:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003b320:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003b330:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003b340:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003b350:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003b360:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b | 0003b370:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003b380:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b390:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b3a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b3b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b3c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b3d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b3e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003b3f0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b400:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b410:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b420:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003b430:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003b440:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003b450:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003b460:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003b470:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003b480:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003b490:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 0003b4a0:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 0003b4b0:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003b4c0:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003b4d0:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003b4e0:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003b4f0:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b500:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b510:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b520:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b530:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b540:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b550:·3532·2220·7461·6269·6e64·6578·3d22·3022··52"·tabindex="0" | |||
| 0003b560:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b570:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b580:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b590:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b5a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b5b0:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003b5c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b5d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b5e0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b5f0:·2269·646d·3732·3532·223e·3c74·6162·6c65··"idm7252"><table | |||
| 0003b600:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b610:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b620:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b630:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b640:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b650:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b660:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b670:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b680:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b690:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b6a0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| Max diff block lines reached; 21174601/21206809 bytes (99.85%) of diff not shown. | |||
| Offset 14322, 15 lines modified | Offset 14322, 15 lines modified | ||
| 00037f10:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037f10:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f20:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f20:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f30:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f30:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f40:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f40:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f50:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f50:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f60:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f60:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f70:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f70:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f80:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00037f80:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00037f90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037fa0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037fa0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037fb0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037fb0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fc0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fc0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fd0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fd0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fe0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fe0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037ff0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037ff0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15093, 234 lines modified | Offset 15093, 234 lines modified | ||
| 0003af40:·6765·743d·2223·6964·6d37·3235·3022·2074··get="#idm7250"·t | 0003af40:·6765·743d·2223·6964·6d37·3235·3022·2074··get="#idm7250"·t | ||
| 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003afb0:·20 | 0003afb0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | ||
| 0003afc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003afd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003afe0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003aff0:·6964·3d22·6964·6d37·3235·3022·3e3c·7461··id="idm7250"><ta | |||
| 0003b000:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b010:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b020:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b030:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b040:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b050:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b060:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b070:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b080:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b090:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b0a0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b0b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b0c0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b0d0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b0e0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b0f0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b100:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b110:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b120:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b130:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b140:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b150:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b160:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b170:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b180:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b190:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b1a0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b1b0:·3531·2220·7461·6269·6e64·6578·3d22·3022··51"·tabindex="0" | |||
| 0003b1c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b1d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b1e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b1f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b200:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b210:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003 | 0003b220:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003 | 0003b230:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003 | 0003b240:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003 | 0003b250:·6522·2069·643d·2269·646d·3732·3531·223e··e"·id="idm7251"> | ||
| 0003b | 0003b260:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003b | 0003b270:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003b020 | 0003b280:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b0 | 0003b290:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b | 0003b2a0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003b | 0003b2b0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b2c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b07 | 0003b2d0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b | 0003b2e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b2f0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b | 0003b300:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b | 0003b310:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003b320:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b | 0003b330:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 0003b | 0003b340:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b0f0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b100:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b110:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b120:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b130:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b140:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b150:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b160:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b170:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b180:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b190:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b1a0:·5d0a·2020·7461·6773·3a0a·2020·2d20·4343··].··tags:.··-·CC | |||
| 0003b1b0:·452d·3930·3437·372d·310a·2020·2d20·434a··E-90477-1.··-·CJ | |||
| 0003b1c0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b1d0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b1e0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b1f0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b200:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b210:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b220:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b230:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b240:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b250:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b260:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b270:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b | 0003b350:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 0003b360:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 0003b370:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 0003b380:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 0003b390:·205b·2021·202d·6620·2f2e·646f·636b·6572···[·!·-f·/.docker | |||
| 0003b3a0:·656e·7620·5d20·2661·6d70·3b26·616d·703b··env·]·&& | |||
| 0003b3b0:·205b·2021·202d·6620·2f72·756e·2f2e·636f···[·!·-f·/run/.co | |||
| 0003b3c0:·6e74·6169·6e65·7265·6e76·205d·3b20·7468··ntainerenv·];·th | |||
| 0003b3d0:·656e·0a0a·6966·2021·2072·706d·202d·7120··en..if·!·rpm·-q· | |||
| 0003b3e0:·2d2d·7175·6965·7420·2261·6964·6522·203b··--quiet·"aide"·; | |||
| 0003b3f0:·2074·6865·6e0a·2020·2020·646e·6620·696e···then.····dnf·in | |||
| 0003b400:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b410:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | |||
| 0003b420:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | |||
| 0003b430:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | |||
| 0003b440:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | |||
| 0003b450:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | |||
| 0003b460:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b470:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b480:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b490:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| Max diff block lines reached; 9099759/9131829 bytes (99.65%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 118, 53 lines modified | Offset 118, 26 lines modified | ||
| 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ·············_\x8c_\x8i_\x8s············6.1.1 | 123 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | -·name:·Ensure·aide·is·installed | ||
| 131 | ··package: | ||
| 132 | ····name:·aide | ||
| 133 | ····state:·present | ||
| 134 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 135 | ··tags: | ||
| 136 | ··-·CCE-90477-1 | ||
| 137 | ··-·CJIS-5.10.1.3 | ||
| 138 | ··-·NIST-800-53-CM-6(a) | ||
| 139 | ··-·PCI-DSS-Req-11.5 | ||
| 140 | ··-·PCI-DSSv4-11.5.2 | ||
| 141 | ··-·enable_strategy | ||
| 142 | ··-·low_complexity | ||
| 143 | ··-·low_disruption | ||
| 144 | ··-·medium_severity | ||
| 145 | ··-·no_reboot_needed | ||
| 146 | ··-·package_aide_installed | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 152 | include·install_aide | 130 | include·install_aide |
| 153 | class·install_aide·{ | 131 | class·install_aide·{ |
| 154 | ··package·{·'aide': | 132 | ··package·{·'aide': |
| 155 | ····ensure·=>·'installed', | 133 | ····ensure·=>·'installed', |
| 156 | ··} | 134 | ··} |
| 157 | } | 135 | } |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | 141 | #·Remediation·is·applicable·only·in·certain·platforms |
| 168 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 142 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 179, 21 lines modified | Offset 152, 48 lines modified | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | package·install·aide | 157 | package·install·aide |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | package·--add=aide | 167 | package·--add=aide |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | -·name:·Ensure·aide·is·installed | ||
| 174 | ··package: | ||
| 175 | ····name:·aide | ||
| 176 | ····state:·present | ||
| 177 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 178 | ··tags: | ||
| 179 | ··-·CCE-90477-1 | ||
| 180 | ··-·CJIS-5.10.1.3 | ||
| 181 | ··-·NIST-800-53-CM-6(a) | ||
| 182 | ··-·PCI-DSS-Req-11.5 | ||
| 183 | ··-·PCI-DSSv4-11.5.2 | ||
| 184 | ··-·enable_strategy | ||
| 185 | ··-·low_complexity | ||
| 186 | ··-·low_disruption | ||
| 187 | ··-·medium_severity | ||
| 188 | ··-·no_reboot_needed | ||
| 189 | ··-·package_aide_installed | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/sbin/aide·--init | 192 | $·sudo·/usr/sbin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 195 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 194 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 196 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 195 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 197 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 196 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 218, 14 lines modified | Offset 218, 28 lines modified | ||
| 218 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 218 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 219 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 219 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 222 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 222 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 223 | ·············_\x8c_\x8i_\x8s············6.1.1 | 223 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1031208/1037283 bytes (99.41%) of diff not shown. | |||
| Offset 14321, 15 lines modified | Offset 14321, 15 lines modified | ||
| 00037f00:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037f00:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037f10:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037f10:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037f20:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037f20:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037f30:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037f30:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037f40:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037f40:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037f50:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037f50:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037f60:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037f60:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037f70:·2032·3032·342d·3131·2d30·3 | 00037f70:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 00037f80:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037f80:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037f90:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037f90:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037fa0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037fa0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037fb0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037fb0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037fc0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037fc0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037fd0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037fd0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037fe0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037fe0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14771, 218 lines modified | Offset 14771, 218 lines modified | ||
| 00039b20:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00039b20:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00039b30:·3036·3837·2220·7461·6269·6e64·6578·3d22··0687"·tabindex=" | 00039b30:·3036·3837·2220·7461·6269·6e64·6578·3d22··0687"·tabindex=" | ||
| 00039b40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00039b40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039b50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039b50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039b60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039b60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039b70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039b70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039b80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039b80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039b90:·6469·6174·696f·6e20· | 00039b90:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 00039ba0:· | 00039ba0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039bb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00039bc0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00039bd0:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | |||
| 00039be0:·3638·3722·3e3c·7461·626c·6520·636c·6173··687"><table·clas | |||
| 00039bf0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00039bb0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00039bc0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00039bd0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 00039be0:·3036·3837·223e·3c74·6162·6c65·2063·6c61··0687"><table·cla | |||
| 00039bf0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00039c00:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00039c | 00039c00:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 00039c20:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00039c30:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00039c40:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039c50:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00039c | 00039c10:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 00039c20:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00039c30:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00039c40:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039c50:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00039c60:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00039c70:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039c80:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00039c90:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00039ca0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00039cb0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00039c | 00039cc0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 00039cd0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 00039ce0:·6c75·6465·2069·6e73·7461·6c6c·5f64·6e66··lude·install_dnf | |||
| 00039c80:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00039c90:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00039ca0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00039cb0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00039cc0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00039cd0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039ce0:·6e61·6d65·3a20·456e·7375·7265·2064·6e66··name:·Ensure·dnf | |||
| 00039cf0:·2d61·7574·6f6d·6174·6963·2069·7320·696e··-automatic·is·in | |||
| 00039d00:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 00039d10:·653a·0a20·2020·206e·616d·653a·2064·6e66··e:.····name:·dnf | |||
| 00039 | 00039cf0:·2d61·7574·6f6d·6174·6963·0a0a·636c·6173··-automatic..clas | ||
| 00039d00:·7320·696e·7374·616c·6c5f·646e·662d·6175··s·install_dnf-au | |||
| 00039d10:·746f·6d61·7469·6320·7b0a·2020·7061·636b··tomatic·{.··pack | |||
| 00039d30:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 00039d40:·7461·6773·3a0a·2020·2d20·4343·452d·3837··tags:.··-·CCE-87 | |||
| 00039d50:·3536·312d·370a·2020·2d20·656e·6162·6c65··561-7.··-·enable | |||
| 00039d60:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00039d70:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00039d80:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00039d90:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 00039da0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 00039db0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 00039d | 00039d20:·6167·6520·7b20·2764·6e66·2d61·7574·6f6d··age·{·'dnf-autom | ||
| 00039d | 00039d30:·6174·6963·273a·0a20·2020·2065·6e73·7572··atic':.····ensur | ||
| 00039d40:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 00039d50:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 00039d | 00039d60:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 00039d | 00039d70:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 00039 | 00039d80:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 00039 | 00039d90:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 00039 | 00039da0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00039 | 00039db0:·6d31·3036·3838·2220·7461·6269·6e64·6578··m10688"·tabindex | ||
| 00039 | 00039dc0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00039 | 00039dd0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00039 | 00039de0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00039 | 00039df0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00039e | 00039e00:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00039e90:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 00039e | 00039e10:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 00039e20:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 00039e | 00039e30:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039e | 00039e40:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00039e | 00039e50:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | ||
| 00039e | 00039e60:·3638·3822·3e3c·7461·626c·6520·636c·6173··688"><table·clas | ||
| 00039e | 00039e70:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 00039 | 00039e80:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 00039 | 00039e90:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 00039 | 00039ea0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 00039 | 00039eb0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 00039 | 00039ec0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 00039 | 00039ed0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 00039 | 00039ee0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 00039 | 00039ef0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 00039f | 00039f00:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 00039f90:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039fa0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039fb0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00039f | 00039f10:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 00039f20:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00039f30:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00039f40:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00039f | 00039f50:·653e·3c70·7265·3e3c·636f·6465·3e0a·6966··e><pre><code>.if | ||
| 00039f | 00039f60:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | ||
| 00039f | 00039f70:·7420·2264·6e66·2d61·7574·6f6d·6174·6963··t·"dnf-automatic | ||
| 00039f80:·2220·3b20·7468·656e·0a20·2020·2064·6e66··"·;·then.····dnf | |||
| 00039f90:·2069·6e73·7461·6c6c·202d·7920·2264·6e66···install·-y·"dnf | |||
| 00039fa0:·2d61·7574·6f6d·6174·6963·220a·6669·0a3c··-automatic".fi.< | |||
| 0003a000:·636c·6173·7320·696e·7374·616c·6c5f·646e··class·install_dn | |||
| 0003a010:·662d·6175·746f·6d61·7469·6320·7b0a·2020··f-automatic·{.·· | |||
| 0003a020:·7061·636b·6167·6520·7b20·2764·6e66·2d61··package·{·'dnf-a | |||
| 0003a030:·7574·6f6d·6174·6963·273a·0a20·2020·2065··utomatic':.····e | |||
| 0003a040:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| Max diff block lines reached; 2947960/2977822 bytes (99.00%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 59 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 59 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 60 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 60 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 84, 48 lines modified | Offset 84, 26 lines modified | ||
| 84 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 84 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 85 | ·············suitable·for·automatic,·regular·execution. | 85 | ·············suitable·for·automatic,·regular·execution. |
| 86 | Severity: ···medium | 86 | Severity: ···medium |
| 87 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 87 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 88 | Identifiers:·CCE-87561-7 | 88 | Identifiers:·CCE-87561-7 |
| 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 96 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 97 | ··package: | ||
| 98 | ····name:·dnf-automatic | ||
| 99 | ····state:·present | ||
| 100 | ··tags: | ||
| 101 | ··-·CCE-87561-7 | ||
| 102 | ··-·enable_strategy | ||
| 103 | ··-·low_complexity | ||
| 104 | ··-·low_disruption | ||
| 105 | ··-·medium_severity | ||
| 106 | ··-·no_reboot_needed | ||
| 107 | ··-·package_dnf-automatic_installed | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | include·install_dnf-automatic | 96 | include·install_dnf-automatic |
| 114 | class·install_dnf-automatic·{ | 97 | class·install_dnf-automatic·{ |
| 115 | ··package·{·'dnf-automatic': | 98 | ··package·{·'dnf-automatic': |
| 116 | ····ensure·=>·'installed', | 99 | ····ensure·=>·'installed', |
| 117 | ··} | 100 | ··} |
| 118 | } | 101 | } |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | [[packages]] | ||
| 121 | name·=·"dnf-automatic" | ||
| 122 | version·=·"*" | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 107 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 134, 21 lines modified | Offset 112, 43 lines modified | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | package·install·dnf-automatic | 117 | package·install·dnf-automatic |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"dnf-automatic" | ||
| 121 | version·=·"*" | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | package·--add=dnf-automatic | 127 | package·--add=dnf-automatic |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 134 | ··package: | ||
| 135 | ····name:·dnf-automatic | ||
| 136 | ····state:·present | ||
| 137 | ··tags: | ||
| 138 | ··-·CCE-87561-7 | ||
| 139 | ··-·enable_strategy | ||
| 140 | ··-·low_complexity | ||
| 141 | ··-·low_disruption | ||
| 142 | ··-·medium_severity | ||
| 143 | ··-·no_reboot_needed | ||
| 144 | ··-·package_dnf-automatic_installed | ||
| 146 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 145 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 147 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 146 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 148 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 147 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 149 | automatic.conf. | 148 | automatic.conf. |
| 150 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 149 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 151 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 150 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 152 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 151 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 159, 37 lines modified | Offset 159, 14 lines modified | ||
| 159 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 159 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 160 | Identifiers:·CCE-86671-5 | 160 | Identifiers:·CCE-86671-5 |
| 161 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 161 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 162 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 162 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 163 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 163 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 164 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 164 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 165 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 165 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 171 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 172 | ··ini_file: | ||
| 173 | ····dest:·/etc/dnf/automatic.conf | ||
| 174 | ····section:·commands | ||
| 175 | ····option:·apply_updates | ||
| 176 | ····value:·'yes' | ||
| Max diff block lines reached; 197662/203544 bytes (97.11%) of diff not shown. | |||
| Offset 14293, 15 lines modified | Offset 14293, 15 lines modified | ||
| 00037d40:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037d40:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037d50:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037d50:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037d60:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037d60:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037d70:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037d70:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037d80:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037d80:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | 00037da0:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037db0:·3 | 00037db0:·3729·0a20·2020·2020·2020·2020·2020·2020··7).············· | ||
| 00037dc0:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037dc0:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037dd0:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037dd0:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037de0:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037de0:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037df0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037df0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037e00:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037e00:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037e10:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037e10:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037e20:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037e20:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15135, 235 lines modified | Offset 15135, 235 lines modified | ||
| 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b1f0:·6964·6d37·3235·3022·2074·6162·696e·6465··idm7250"·tabinde | 0003b1f0:·6964·6d37·3235·3022·2074·6162·696e·6465··idm7250"·tabinde | ||
| 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b250:·656d·6564·6961·7469·6f6e·20 | 0003b250:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003b260:· | 0003b260:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003b270:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b280:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b290:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b2a0:·6d37·3235·3022·3e3c·7461·626c·6520·636c··m7250"><table·cl | |||
| 0003b2b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b2c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b2d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b2e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b2f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b300:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b310:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b320:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b330:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b340:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b350:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b360:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b370:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b380:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b390:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b3a0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b3b0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b3c0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b3d0:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b3e0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b3f0:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b400:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b410:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b420:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b430:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b440:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b450:·6574·3d22·2369·646d·3732·3531·2220·7461··et="#idm7251"·ta | |||
| 0003b460:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b470:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b480:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b490:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b4a0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b4b0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b4c0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b | 0003b4d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003b4e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003b4f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003b500:·2269·646d·3732·3531·223e·3c74·6162·6c65··"idm7251"><table | ||
| 0003b | 0003b510:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b520:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b530:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b540:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b550:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b560:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b570:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b | 0003b580:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003b590:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b | 0003b5a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003b5b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003b5c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003b5d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003b | 0003b5e0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003b | 0003b5f0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b3a0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b3b0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b3c0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b3d0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b3e0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b3f0:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b400:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b410:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b420:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b430:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b440:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b450:·6773·3a0a·2020·2d20·4343·452d·3930·3437··gs:.··-·CCE-9047 | |||
| 0003b460:·372d·310a·2020·2d20·434a·4953·2d35·2e31··7-1.··-·CJIS-5.1 | |||
| 0003b470:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b480:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b490:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b4a0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b4b0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b4c0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b4d0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b4e0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b4f0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b500:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b510:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b520:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b | 0003b600:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b610:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003b620:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003b630:·6174·666f·726d·730a·6966·205b·2021·202d··atforms.if·[·!·- | |||
| 0003b640:·6620·2f2e·646f·636b·6572·656e·7620·5d20··f·/.dockerenv·]· | |||
| 0003b650:·2661·6d70·3b26·616d·703b·205b·2021·202d··&&·[·!·- | |||
| 0003b660:·6620·2f72·756e·2f2e·636f·6e74·6169·6e65··f·/run/.containe | |||
| 0003b670:·7265·6e76·205d·3b20·7468·656e·0a0a·6966··renv·];·then..if | |||
| 0003b680:·2021·2072·706d·202d·7120·2d2d·7175·6965···!·rpm·-q·--quie | |||
| 0003b690:·7420·2261·6964·6522·203b·2074·6865·6e0a··t·"aide"·;·then. | |||
| 0003b6a0:·2020·2020·646e·6620·696e·7374·616c·6c20······dnf·install· | |||
| 0003b6b0:·2d79·2022·6169·6465·220a·6669·0a0a·656c··-y·"aide".fi..el | |||
| 0003b6c0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | |||
| 0003b6d0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | |||
| 0003b6e0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | |||
| 0003b6f0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | |||
| 0003b700:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | |||
| 0003b710:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b720:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b730:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| Max diff block lines reached; 23833580/23865788 bytes (99.87%) of diff not shown. | |||
| Offset 14293, 15 lines modified | Offset 14293, 15 lines modified | ||
| 00037d40:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d40:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037d50:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037d50:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037d60:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037d60:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037d70:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037d70:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037d80:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037d80:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037d90:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037d90:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037da0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037da0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037db0:·2032·3032·342d·3131·2d30·3 | 00037db0:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 00037dc0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037dc0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037dd0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037dd0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037de0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037de0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037df0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037df0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e00:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e00:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e10:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e10:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e20:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e20:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15104, 235 lines modified | Offset 15104, 235 lines modified | ||
| 0003aff0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003aff0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b000:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b000:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b060:·6174·696f·6e20· | 0003b060:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | ||
| 0003b070:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b080:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b090:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b0a0:·7073·6522·2069·643d·2269·646d·3732·3530··pse"·id="idm7250 | |||
| 0003b0b0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b0c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b0d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b0e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b0f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b100:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b110:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b120:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b130:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b140:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b150:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b160:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b170:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b180:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b190:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b1a0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b1b0:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b1c0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b1d0:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b1e0:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b1f0:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b200:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003b210:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b220:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b230:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b240:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b250:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b260:·6964·6d37·3235·3122·2074·6162·696e·6465··idm7251"·tabinde | |||
| 0003b270:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b280:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b290:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b2a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b2b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b2c0:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b | 0003b2d0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003b | 0003b2e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b | 0003b2f0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b | 0003b300:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | ||
| 0003b | 0003b310:·3235·3122·3e3c·7461·626c·6520·636c·6173··251"><table·clas | ||
| 0003b | 0003b320:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b | 0003b330:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b | 0003b340:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b | 0003b350:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b | 0003b360:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b | 0003b370:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b380:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b | 0003b390:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b3a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b3b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b3c0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b3d0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b3e0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b3f0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b400:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | |||
| 0003b410:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003b420:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003b430:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003b440:·6d73·0a69·6620·5b20·2120·2d66·202f·2e64··ms.if·[·!·-f·/.d | |||
| 0003b450:·6f63·6b65·7265·6e76·205d·2026·616d·703b··ockerenv·]·& | |||
| 0003b460:·2661·6d70·3b20·5b20·2120·2d66·202f·7275··&·[·!·-f·/ru | |||
| 0003b470:·6e2f·2e63·6f6e·7461·696e·6572·656e·7620··n/.containerenv· | |||
| 0003b480:·5d3b·2074·6865·6e0a·0a69·6620·2120·7270··];·then..if·!·rp | |||
| 0003b490:·6d20·2d71·202d·2d71·7569·6574·2022·6169··m·-q·--quiet·"ai | |||
| 0003b4a0:·6465·2220·3b20·7468·656e·0a20·2020·2064··de"·;·then.····d | |||
| 0003b4b0:·6e66·2069·6e73·7461·6c6c·202d·7920·2261··nf·install·-y·"a | |||
| 0003b4c0:·6964·6522·0a66·690a·0a65·6c73·650a·2020··ide".fi..else.·· | |||
| 0003b4d0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | |||
| 0003b4e0:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | |||
| 0003b4f0:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | |||
| 0003b500:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | |||
| 0003b510:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | |||
| 0003b520:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b530:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b540:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b550:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b560:·2d74·6172·6765·743d·2223·6964·6d37·3235··-target="#idm725 | |||
| 0003b570:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b580:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b590:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b5a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b5b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b5c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b5d0:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003b5e0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b5f0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b600:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b610:·6964·6d37·3235·3222·3e3c·7461·626c·6520··idm7252"><table· | |||
| 0003b620:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b630:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b640:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b650:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b660:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b670:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b680:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b690:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b6a0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b6b0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b6c0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b6d0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| Max diff block lines reached; 10591660/10623868 bytes (99.70%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- |
| 41 | ··············Server | 41 | ··············Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 103, 53 lines modified | Offset 103, 26 lines modified | ||
| 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | -·name:·Ensure·aide·is·installed | ||
| 116 | ··package: | ||
| 117 | ····name:·aide | ||
| 118 | ····state:·present | ||
| 119 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 120 | ··tags: | ||
| 121 | ··-·CCE-90477-1 | ||
| 122 | ··-·CJIS-5.10.1.3 | ||
| 123 | ··-·NIST-800-53-CM-6(a) | ||
| 124 | ··-·PCI-DSS-Req-11.5 | ||
| 125 | ··-·PCI-DSSv4-11.5.2 | ||
| 126 | ··-·enable_strategy | ||
| 127 | ··-·low_complexity | ||
| 128 | ··-·low_disruption | ||
| 129 | ··-·medium_severity | ||
| 130 | ··-·no_reboot_needed | ||
| 131 | ··-·package_aide_installed | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | include·install_aide | 115 | include·install_aide |
| 138 | class·install_aide·{ | 116 | class·install_aide·{ |
| 139 | ··package·{·'aide': | 117 | ··package·{·'aide': |
| 140 | ····ensure·=>·'installed', | 118 | ····ensure·=>·'installed', |
| 141 | ··} | 119 | ··} |
| 142 | } | 120 | } |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | [[packages]] | ||
| 145 | name·=·"aide" | ||
| 146 | version·=·"*" | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 152 | #·Remediation·is·applicable·only·in·certain·platforms | 126 | #·Remediation·is·applicable·only·in·certain·platforms |
| 153 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 127 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 164, 21 lines modified | Offset 137, 48 lines modified | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 169 | package·install·aide | 142 | package·install·aide |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | [[packages]] | ||
| 145 | name·=·"aide" | ||
| 146 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | package·--add=aide | 152 | package·--add=aide |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | -·name:·Ensure·aide·is·installed | ||
| 159 | ··package: | ||
| 160 | ····name:·aide | ||
| 161 | ····state:·present | ||
| 162 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 163 | ··tags: | ||
| 164 | ··-·CCE-90477-1 | ||
| 165 | ··-·CJIS-5.10.1.3 | ||
| 166 | ··-·NIST-800-53-CM-6(a) | ||
| 167 | ··-·PCI-DSS-Req-11.5 | ||
| 168 | ··-·PCI-DSSv4-11.5.2 | ||
| 169 | ··-·enable_strategy | ||
| 170 | ··-·low_complexity | ||
| 171 | ··-·low_disruption | ||
| 172 | ··-·medium_severity | ||
| 173 | ··-·no_reboot_needed | ||
| 174 | ··-·package_aide_installed | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 176 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·/usr/sbin/aide·--init | 177 | $·sudo·/usr/sbin/aide·--init |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 180 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 179 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 181 | To·initiate·a·manual·check,·run·the·following·command: | 180 | To·initiate·a·manual·check,·run·the·following·command: |
| 182 | $·sudo·/usr/sbin/aide·--check | 181 | $·sudo·/usr/sbin/aide·--check |
| Offset 196, 14 lines modified | Offset 196, 28 lines modified | ||
| 196 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 196 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 197 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 197 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 198 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 198 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 199 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 199 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 200 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 200 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 201 | ·············_\x8c_\x8i_\x8s············6.1.1 | 201 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 202 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 202 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1299217/1305362 bytes (99.53%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037dc0:·3230·3234·2d31·312d·303 | 00037dc0:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15095, 235 lines modified | Offset 15095, 235 lines modified | ||
| 0003af60:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003af60:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003af70:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | 0003af70:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | ||
| 0003af80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003af80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003af90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003af90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003afa0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003afa0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003afb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003afb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003afc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003afc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003afd0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003af | 0003afd0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | ||
| 0003afe0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003aff0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b000:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b010:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 0003b020:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b030:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b040:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b050:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b060:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b070:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b080:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b090:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b0a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b0b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b0c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b0d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b0e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b0f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b100:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b110:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b120:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b130:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b140:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b150:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b160:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b170:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b180:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b190:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b1a0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b1b0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b1c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b1d0:·2369·646d·3732·3531·2220·7461·6269·6e64··#idm7251"·tabind | |||
| 0003b1e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b1f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b200:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b210:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b220:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b230:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b240:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003 | 0003b250:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b00 | 0003b260:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003b270:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003b280:·3732·3531·223e·3c74·6162·6c65·2063·6c61··7251"><table·cla | ||
| 0003b03 | 0003b290:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003b2a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003b2b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b06 | 0003b2c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003b2d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003b2e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003b2f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b | 0003b300:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003b310:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b320:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b330:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b340:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b350:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b360:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b370:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | |||
| 0003b380:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b390:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b3a0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b3b0:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003b3c0:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003b3d0:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| 0003b3e0:·756e·2f2e·636f·6e74·6169·6e65·7265·6e76··un/.containerenv | |||
| 0003b3f0:·205d·3b20·7468·656e·0a0a·6966·2021·2072···];·then..if·!·r | |||
| 0003b400:·706d·202d·7120·2d2d·7175·6965·7420·2261··pm·-q·--quiet·"a | |||
| 0003b410:·6964·6522·203b·2074·6865·6e0a·2020·2020··ide"·;·then.···· | |||
| 0003b420:·646e·6620·696e·7374·616c·6c20·2d79·2022··dnf·install·-y·" | |||
| 0003b430:·6169·6465·220a·6669·0a0a·656c·7365·0a20··aide".fi..else.· | |||
| 0003b440:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | |||
| 0003b450:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | |||
| 0003b460:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | |||
| 0003b470:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | |||
| 0003b480:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | |||
| 0003b490:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b4a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b4b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b4c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b4d0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b4e0:·3532·2220·7461·6269·6e64·6578·3d22·3022··52"·tabindex="0" | |||
| 0003b4f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b500:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b510:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b520:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b530:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b540:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003b550:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b560:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b570:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b580:·2269·646d·3732·3532·223e·3c74·6162·6c65··"idm7252"><table | |||
| 0003b590:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b5a0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b5b0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b5c0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b5d0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b5e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b5f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b600:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b610:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b620:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b630:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| Max diff block lines reached; 10209712/10241920 bytes (99.69%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- |
| 41 | ··············Workstation | 41 | ··············Workstation |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 101, 53 lines modified | Offset 101, 26 lines modified | ||
| 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ·············_\x8c_\x8i_\x8s············6.1.1 | 106 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | -·name:·Ensure·aide·is·installed | ||
| 114 | ··package: | ||
| 115 | ····name:·aide | ||
| 116 | ····state:·present | ||
| 117 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 118 | ··tags: | ||
| 119 | ··-·CCE-90477-1 | ||
| 120 | ··-·CJIS-5.10.1.3 | ||
| 121 | ··-·NIST-800-53-CM-6(a) | ||
| 122 | ··-·PCI-DSS-Req-11.5 | ||
| 123 | ··-·PCI-DSSv4-11.5.2 | ||
| 124 | ··-·enable_strategy | ||
| 125 | ··-·low_complexity | ||
| 126 | ··-·low_disruption | ||
| 127 | ··-·medium_severity | ||
| 128 | ··-·no_reboot_needed | ||
| 129 | ··-·package_aide_installed | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | include·install_aide | 113 | include·install_aide |
| 136 | class·install_aide·{ | 114 | class·install_aide·{ |
| 137 | ··package·{·'aide': | 115 | ··package·{·'aide': |
| 138 | ····ensure·=>·'installed', | 116 | ····ensure·=>·'installed', |
| 139 | ··} | 117 | ··} |
| 140 | } | 118 | } |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | 124 | #·Remediation·is·applicable·only·in·certain·platforms |
| 151 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 125 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 162, 21 lines modified | Offset 135, 48 lines modified | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | package·install·aide | 140 | package·install·aide |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | package·--add=aide | 150 | package·--add=aide |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | -·name:·Ensure·aide·is·installed | ||
| 157 | ··package: | ||
| 158 | ····name:·aide | ||
| 159 | ····state:·present | ||
| 160 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 161 | ··tags: | ||
| 162 | ··-·CCE-90477-1 | ||
| 163 | ··-·CJIS-5.10.1.3 | ||
| 164 | ··-·NIST-800-53-CM-6(a) | ||
| 165 | ··-·PCI-DSS-Req-11.5 | ||
| 166 | ··-·PCI-DSSv4-11.5.2 | ||
| 167 | ··-·enable_strategy | ||
| 168 | ··-·low_complexity | ||
| 169 | ··-·low_disruption | ||
| 170 | ··-·medium_severity | ||
| 171 | ··-·no_reboot_needed | ||
| 172 | ··-·package_aide_installed | ||
| 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 173 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 175 | Run·the·following·command·to·generate·a·new·database: | 174 | Run·the·following·command·to·generate·a·new·database: |
| 176 | $·sudo·/usr/sbin/aide·--init | 175 | $·sudo·/usr/sbin/aide·--init |
| 177 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 176 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 178 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 177 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 179 | To·initiate·a·manual·check,·run·the·following·command: | 178 | To·initiate·a·manual·check,·run·the·following·command: |
| 180 | $·sudo·/usr/sbin/aide·--check | 179 | $·sudo·/usr/sbin/aide·--check |
| Offset 194, 14 lines modified | Offset 194, 28 lines modified | ||
| 194 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 194 | References:··_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 195 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 195 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 196 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 196 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 197 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 197 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 198 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 198 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 199 | ·············_\x8c_\x8i_\x8s············6.1.1 | 199 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 200 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 200 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1243681/1249836 bytes (99.51%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037dc0:·3230·3234·2d31·312d·303 | 00037dc0:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15127, 234 lines modified | Offset 15127, 234 lines modified | ||
| 0003b160:·6574·3d22·2369·646d·3732·3530·2220·7461··et="#idm7250"·ta | 0003b160:·6574·3d22·2369·646d·3732·3530·2220·7461··et="#idm7250"·ta | ||
| 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b1d0:· | 0003b1d0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | ||
| 0003b1e0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b1f0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b200:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b210:·643d·2269·646d·3732·3530·223e·3c74·6162··d="idm7250"><tab | |||
| 0003b220:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b230:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b240:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b250:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b260:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b270:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b280:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b290:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b2a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b2b0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b2c0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b2d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b2e0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b2f0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b300:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b310:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b320:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b330:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b340:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b350:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b360:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b370:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b380:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b390:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b3a0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b3b0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b3c0:·2d74·6172·6765·743d·2223·6964·6d37·3235··-target="#idm725 | |||
| 0003b3d0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 0003b3e0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b3f0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b400:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b410:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b420:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b430:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b | 0003b440:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b | 0003b450:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b | 0003b460:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b | 0003b470:·2220·6964·3d22·6964·6d37·3235·3122·3e3c··"·id="idm7251">< | ||
| 0003b | 0003b480:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003b | 0003b490:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003b | 0003b4a0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003b | 0003b4b0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003b | 0003b4c0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003b | 0003b4d0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b | 0003b4e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b4f0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b | 0003b500:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b510:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b | 0003b520:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b | 0003b530:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b540:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b | 0003b550:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003b | 0003b560:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b310:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b320:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b330:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b340:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b350:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b360:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b370:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b380:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b390:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b3a0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b3b0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b3c0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b3d0:·2d39·3034·3737·2d31·0a20·202d·2043·4a49··-90477-1.··-·CJI | |||
| 0003b3e0:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003b3f0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b400:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b410:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b420:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b430:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b440:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b450:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b460:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b470:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b480:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b490:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b | 0003b570:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003b580:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0003b590:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0003b5a0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0003b5b0:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0003b5c0:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0003b5d0:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0003b5e0:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 0003b5f0:·6e0a·0a69·6620·2120·7270·6d20·2d71·202d··n..if·!·rpm·-q·- | |||
| 0003b600:·2d71·7569·6574·2022·6169·6465·2220·3b20··-quiet·"aide"·;· | |||
| 0003b610:·7468·656e·0a20·2020·2064·6e66·2069·6e73··then.····dnf·ins | |||
| 0003b620:·7461·6c6c·202d·7920·2261·6964·6522·0a66··tall·-y·"aide".f | |||
| 0003b630:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | |||
| 0003b640:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003b650:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003b660:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003b670:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003b680:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b690:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b6a0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b6b0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| Max diff block lines reached; 23641994/23674064 bytes (99.86%) of diff not shown. | |||
| Offset 14306, 15 lines modified | Offset 14306, 15 lines modified | ||
| 00037e10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037e10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037e20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037e20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037e30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037e30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e80:·3032·342d·3131·2d30·3 | 00037e80:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 00037e90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037ea0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037ea0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037eb0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037eb0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037ec0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037ec0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037ed0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037ed0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037ee0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037ee0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ef0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ef0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15188, 306 lines modified | Offset 15188, 306 lines modified | ||
| 0003b530:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b530:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b540:·6d36·3930·3822·2074·6162·696e·6465·783d··m6908"·tabindex= | 0003b540:·6d36·3930·3822·2074·6162·696e·6465·783d··m6908"·tabindex= | ||
| 0003b550:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b550:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b560:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b560:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b570:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b570:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b580:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b580:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b590:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b590:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b5a0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b5b0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b5c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b5d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b5e0:·6170·7365·2220·6964·3d22·6964·6d36·3930··apse"·id="idm690 | |||
| 0003b5f0:·3822·3e3c·7072·653e·3c63·6f64·653e·0a23··8"><pre><code>.# | |||
| 0003b600:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | |||
| 0003b610:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | |||
| 0003b620:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | |||
| 0003b630:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | |||
| 0003b640:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | |||
| 0003b650:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | |||
| 0003b660:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | |||
| 0003b670:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | |||
| 0003b680:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b690:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | |||
| 0003b6a0:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | |||
| 0003b6b0:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | |||
| 0003b6c0:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | |||
| 0003b6d0:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | |||
| 0003b6e0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003b6f0:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | |||
| 0003b700:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | |||
| 0003b710:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | |||
| 0003b720:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | |||
| 0003b730:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | |||
| 0003b740:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | |||
| 0003b750:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | |||
| 0003b760:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | |||
| 0003b770:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | |||
| 0003b780:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | |||
| 0003b790:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | |||
| 0003b7a0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003b7b0:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | |||
| 0003b7c0:·0a0a·2020·2020·0a20·2020·2064·6e66·2072··..····.····dnf·r | |||
| 0003b7d0:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | |||
| 0003b7e0:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003b7f0:·6c6c·0a20·2020·200a·6669·0a3c·2f63·6f64··ll.····.fi.</cod | |||
| 0003b800:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b810:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b820:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b830:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b840:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b850:·6d36·3930·3922·2074·6162·696e·6465·783d··m6909"·tabindex= | |||
| 0003b860:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b870:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b880:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b890:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b8a0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b | 0003b8b0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b | 0003b8c0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b | 0003b8d0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b | 0003b8e0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003b8f0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003b900:·3639·3039·223e·3c74·6162·6c65·2063·6c61··6909"><table·cla | ||
| 0003b | 0003b910:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003b920:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003b930:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003b940:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003b950:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003b960:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b | 0003b970:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003b980:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b | 0003b990:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b | 0003b9a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003b9b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003b9c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003b9d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b | 0003b9e0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b | 0003b9f0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b | 0003ba00:·6f64·653e·2d20·6e61·6d65·3a20·2753·6574··ode>-·name:·'Set | ||
| 0003b | 0003ba10:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| 0003b | 0003ba20:·616e·6167·6572·2072·6569·6e73·7461·6c6c··anager·reinstall | ||
| 0003b | 0003ba30:·2063·6f6d·6d61·6e64·270a·2020·7365·745f···command'.··set_ | ||
| 0003b | 0003ba40:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003b | 0003ba50:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003b | 0003ba60:·616c·6c5f·636d·643a·2064·6e66·2072·6569··all_cmd:·dnf·rei | ||
| 0003b | 0003ba70:·6e73·7461·6c6c·202d·790a·2020·7768·656e··nstall·-y.··when | ||
| 0003b | 0003ba80:·3a20·616e·7369·626c·655f·6469·7374·7269··:·ansible_distri | ||
| 0003b | 0003ba90:·6275·7469·6f6e·2069·6e20·5b20·2246·6564··bution·in·[·"Fed | ||
| 0003b | 0003baa0:·6f72·6122·2c20·2252·6564·4861·7422·2c20··ora",·"RedHat",· | ||
| 0003b | 0003bab0:·2243·656e·744f·5322·2c20·224f·7261·636c··"CentOS",·"Oracl | ||
| 0003b | 0003bac0:·654c·696e·7578·2220·5d0a·2020·7461·6773··eLinux"·].··tags | ||
| 0003b | 0003bad0:·3a0a·2020·2d20·4343·452d·3839·3934·342d··:.··-·CCE-89944- | ||
| 0003b | 0003bae0:·330a·2020·2d20·434a·4953·2d35·2e31·302e··3.··-·CJIS-5.10. | ||
| 0003b7e0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | |||
| 0003b7f0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | |||
| 0003b800:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | |||
| 0003b810:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | |||
| 0003b820:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | |||
| 0003b830:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | |||
| 0003b840:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b850:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | |||
| 0003b860:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | |||
| 0003b870:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b880:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | |||
| 0003b890:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | |||
| 0003b8a0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b8b0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b8c0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | |||
| 0003b8d0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | |||
| 0003b8e0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | |||
| 0003b8f0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | |||
| 0003b900:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | |||
| Max diff block lines reached; 6315313/6357319 bytes (99.34%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:10 | 46 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 105, 14 lines modified | Offset 105, 27 lines modified | ||
| 105 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 105 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 106 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 106 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 107 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 107 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 108 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 108 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 114 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 115 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 116 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 117 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 118 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 119 | fi | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 117 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 125 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 118 | ··set_fact: | 126 | ··set_fact: |
| Offset 244, 27 lines modified | Offset 257, 14 lines modified | ||
| 244 | ··-·PCI-DSSv4-11.5.2 | 257 | ··-·PCI-DSSv4-11.5.2 |
| 245 | ··-·high_complexity | 258 | ··-·high_complexity |
| 246 | ··-·high_severity | 259 | ··-·high_severity |
| 247 | ··-·medium_disruption | 260 | ··-·medium_disruption |
| 248 | ··-·no_reboot_needed | 261 | ··-·no_reboot_needed |
| 249 | ··-·restrict_strategy | 262 | ··-·restrict_strategy |
| 250 | ··-·rpm_verify_hashes | 263 | ··-·rpm_verify_hashes |
| 251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 252 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 253 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 254 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 255 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 256 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 257 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 258 | fi | ||
| 259 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 264 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 260 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 265 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 261 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 266 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 262 | run·the·following·command·to·determine·which·package·owns·it: | 267 | run·the·following·command·to·determine·which·package·owns·it: |
| 263 | $·rpm·-qf·FILENAME | 268 | $·rpm·-qf·FILENAME |
| 264 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 269 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 265 | $·sudo·rpm·--setugids·PACKAGENAME | 270 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 284, 14 lines modified | Offset 284, 40 lines modified | ||
| 284 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 284 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 285 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 285 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 286 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 286 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 287 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 287 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 288 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 288 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 289 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 289 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 290 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 290 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 293 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 294 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 295 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 296 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 297 | declare·-A·SETPERMS_RPM_DICT | ||
| 298 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 299 | #·is·expected·by·the·RPM·database | ||
| 300 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 301 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 302 | do | ||
| 303 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 304 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 305 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 306 | done | ||
| 307 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 308 | #·correct·values | ||
| 309 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 310 | do | ||
| 311 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 312 | done | ||
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 292 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 293 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 294 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 295 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 296 | -·name:·Read·list·of·files·with·incorrect·ownership | 318 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 297 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 319 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 369, 40 lines modified | Offset 395, 14 lines modified | ||
| 369 | ··-·PCI-DSSv4-11.5.2 | 395 | ··-·PCI-DSSv4-11.5.2 |
| 370 | ··-·high_complexity | 396 | ··-·high_complexity |
| 371 | ··-·high_severity | 397 | ··-·high_severity |
| 372 | ··-·medium_disruption | 398 | ··-·medium_disruption |
| 373 | ··-·no_reboot_needed | 399 | ··-·no_reboot_needed |
| 374 | ··-·restrict_strategy | 400 | ··-·restrict_strategy |
| 375 | ··-·rpm_verify_ownership | 401 | ··-·rpm_verify_ownership |
| 376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 377 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 378 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 379 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 380 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 381 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 669876/677662 bytes (98.85%) of diff not shown. | |||
| Offset 14326, 15 lines modified | Offset 14326, 15 lines modified | ||
| 00037f50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037f50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037f60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037f60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037f70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037f70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037fa0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037fa0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fb0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00037fb0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037fc0:·303 | 00037fc0:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00037fd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037fd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037fe0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037fe0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037ff0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037ff0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038000:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038000:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038010:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038010:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038020:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038020:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038030:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038030:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15209, 306 lines modified | Offset 15209, 306 lines modified | ||
| 0003b680:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | 0003b680:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | ||
| 0003b690:·3038·2220·7461·6269·6e64·6578·3d22·3022··08"·tabindex="0" | 0003b690:·3038·2220·7461·6269·6e64·6578·3d22·3022··08"·tabindex="0" | ||
| 0003b6a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b6a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b6b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b6b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b6c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b6c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b6d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b6d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b6e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b6e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b6f0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b700:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b710:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b720:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b730:·6522·2069·643d·2269·646d·3639·3038·223e··e"·id="idm6908"> | |||
| 0003b740:·3c70·7265·3e3c·636f·6465·3e0a·2320·4669··<pre><code>.#·Fi | |||
| 0003b750:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | |||
| 0003b760:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | |||
| 0003b770:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | |||
| 0003b780:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | |||
| 0003b790:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | |||
| 0003b7a0:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | |||
| 0003b7b0:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | |||
| 0003b7c0:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | |||
| 0003b7d0:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | |||
| 0003b7e0:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | |||
| 0003b7f0:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | |||
| 0003b800:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | |||
| 0003b810:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | |||
| 0003b820:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | |||
| 0003b830:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b840:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | |||
| 0003b850:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | |||
| 0003b860:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | |||
| 0003b870:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | |||
| 0003b880:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | |||
| 0003b890:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | |||
| 0003b8a0:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | |||
| 0003b8b0:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | |||
| 0003b8c0:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | |||
| 0003b8d0:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | |||
| 0003b8e0:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | |||
| 0003b8f0:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | |||
| 0003b900:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | |||
| 0003b910:·2020·200a·2020·2020·646e·6620·7265·696e·····.····dnf·rein | |||
| 0003b920:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | |||
| 0003b930:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | |||
| 0003b940:·2020·2020·0a66·690a·3c2f·636f·6465·3e3c······.fi.</code>< | |||
| 0003b950:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b960:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b970:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b980:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b990:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | |||
| 0003b9a0:·3039·2220·7461·6269·6e64·6578·3d22·3022··09"·tabindex="0" | |||
| 0003b9b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b9c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b9d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b9e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b9f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b | 0003ba00:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003b | 0003ba10:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b | 0003ba20:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003ba30:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003ba40:·6170·7365·2220·6964·3d22·6964·6d36·3930··apse"·id="idm690 | ||
| 0003b | 0003ba50:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | ||
| 0003b | 0003ba60:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b | 0003ba70:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b | 0003ba80:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b | 0003ba90:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b | 0003baa0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b | 0003bab0:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003b | 0003bac0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b | 0003bad0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003b | 0003bae0:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003b | 0003baf0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b | 0003bb00:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b | 0003bb10:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b | 0003bb20:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003b | 0003bb30:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003b | 0003bb40:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b | 0003bb50:·3e2d·206e·616d·653a·2027·5365·7420·6661··>-·name:·'Set·fa | ||
| 0003b | 0003bb60:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| 0003b | 0003bb70:·6765·7220·7265·696e·7374·616c·6c20·636f··ger·reinstall·co | ||
| 0003b | 0003bb80:·6d6d·616e·6427·0a20·2073·6574·5f66·6163··mmand'.··set_fac | ||
| 0003b | 0003bb90:·743a·0a20·2020·2070·6163·6b61·6765·5f6d··t:.····package_m | ||
| 0003b | 0003bba0:·616e·6167·6572·5f72·6569·6e73·7461·6c6c··anager_reinstall | ||
| 0003b | 0003bbb0:·5f63·6d64·3a20·646e·6620·7265·696e·7374··_cmd:·dnf·reinst | ||
| 0003b | 0003bbc0:·616c·6c20·2d79·0a20·2077·6865·6e3a·2061··all·-y.··when:·a | ||
| 0003b | 0003bbd0:·6e73·6962·6c65·5f64·6973·7472·6962·7574··nsible_distribut | ||
| 0003b | 0003bbe0:·696f·6e20·696e·205b·2022·4665·646f·7261··ion·in·[·"Fedora | ||
| 0003b | 0003bbf0:·222c·2022·5265·6448·6174·222c·2022·4365··",·"RedHat",·"Ce | ||
| 0003b | 0003bc00:·6e74·4f53·222c·2022·4f72·6163·6c65·4c69··ntOS",·"OracleLi | ||
| 0003b | 0003bc10:·6e75·7822·205d·0a20·2074·6167·733a·0a20··nux"·].··tags:.· | ||
| 0003b | 0003bc20:·202d·2043·4345·2d38·3939·3434·2d33·0a20···-·CCE-89944-3.· | ||
| 0003b | 0003bc30:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003b | 0003bc40:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003b | 0003bc50:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003b | 0003bc60:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003b | 0003bc70:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003b | 0003bc80:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003b | 0003bc90:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003b | 0003bca0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003b | 0003bcb0:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003b | 0003bcc0:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003b | 0003bcd0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003b | 0003bce0:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003b | 0003bcf0:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003b | 0003bd00:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003b | 0003bd10:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003b | 0003bd20:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003b | 0003bd30:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003b | 0003bd40:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003b | 0003bd50:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003b | 0003bd60:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| Max diff block lines reached; 19627698/19669704 bytes (99.79%) of diff not shown. | |||
| Offset 48, 15 lines modified | Offset 48, 15 lines modified | ||
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Health·Insurance·Portability·and·Accountability·Act | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Health·Insurance·Portability·and·Accountability·Act |
| 49 | ··············(HIPAA) | 49 | ··············(HIPAA) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:redhat:enterprise_linux:10 | 52 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 53 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 54 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 55 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 55 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 56 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 56 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 57 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 57 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 58 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 58 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 59 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 59 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 60 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 60 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 61 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 61 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 62 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 111, 14 lines modified | Offset 111, 27 lines modified | ||
| 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 131 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 124 | ··set_fact: | 132 | ··set_fact: |
| Offset 250, 27 lines modified | Offset 263, 14 lines modified | ||
| 250 | ··-·PCI-DSSv4-11.5.2 | 263 | ··-·PCI-DSSv4-11.5.2 |
| 251 | ··-·high_complexity | 264 | ··-·high_complexity |
| 252 | ··-·high_severity | 265 | ··-·high_severity |
| 253 | ··-·medium_disruption | 266 | ··-·medium_disruption |
| 254 | ··-·no_reboot_needed | 267 | ··-·no_reboot_needed |
| 255 | ··-·restrict_strategy | 268 | ··-·restrict_strategy |
| 256 | ··-·rpm_verify_hashes | 269 | ··-·rpm_verify_hashes |
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 258 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 259 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 260 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 261 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 262 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 263 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 264 | fi | ||
| 265 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 266 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 271 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 267 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 272 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 268 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 273 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 269 | $·rpm·-qf·FILENAME | 274 | $·rpm·-qf·FILENAME |
| 270 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 292, 14 lines modified | Offset 292, 44 lines modified | ||
| 292 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 292 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 293 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 293 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 294 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 294 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 295 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 295 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 296 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 296 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 297 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 297 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 299 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 300 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 301 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 302 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 303 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 304 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 305 | declare·-A·SETPERMS_RPM_DICT | ||
| 306 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 307 | #·is·expected·by·the·RPM·database | ||
| 308 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 309 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 310 | do | ||
| 311 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 312 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 313 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 314 | ········do | ||
| 315 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 316 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 317 | ········done | ||
| 318 | done | ||
| 319 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 320 | #·correct·values | ||
| 321 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 322 | do | ||
| 323 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 324 | done | ||
| 299 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 300 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 301 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 302 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 303 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 304 | -·name:·Read·list·of·files·with·incorrect·permissions | 330 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 305 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 331 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 380, 44 lines modified | Offset 410, 14 lines modified | ||
| 380 | ··-·PCI-DSSv4-11.5.2 | 410 | ··-·PCI-DSSv4-11.5.2 |
| 381 | ··-·high_complexity | 411 | ··-·high_complexity |
| 382 | ··-·high_severity | 412 | ··-·high_severity |
| 383 | ··-·medium_disruption | 413 | ··-·medium_disruption |
| 384 | ··-·no_reboot_needed | 414 | ··-·no_reboot_needed |
| 385 | ··-·restrict_strategy | 415 | ··-·restrict_strategy |
| 386 | ··-·rpm_verify_permissions | 416 | ··-·rpm_verify_permissions |
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1638893/1647125 bytes (99.50%) of diff not shown. | |||
| Offset 14314, 15 lines modified | Offset 14314, 15 lines modified | ||
| 00037e90:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e90:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037ea0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037ea0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037eb0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037eb0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037ec0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037ec0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ed0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ed0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ef0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00037ef0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037f00:·303 | 00037f00:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00037f10:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f10:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f20:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f20:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f30:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f30:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f40:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f40:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f50:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f50:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f60:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f60:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f70:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f70:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15232, 306 lines modified | Offset 15232, 306 lines modified | ||
| 0003b7f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b7f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b800:·646d·3639·3038·2220·7461·6269·6e64·6578··dm6908"·tabindex | 0003b800:·646d·3639·3038·2220·7461·6269·6e64·6578··dm6908"·tabindex | ||
| 0003b810:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b810:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b820:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b820:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b830:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b830:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b840:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b840:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b850:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b850:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b860:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b870:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b880:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b890:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b8a0:·6c61·7073·6522·2069·643d·2269·646d·3639··lapse"·id="idm69 | |||
| 0003b8b0:·3038·223e·3c70·7265·3e3c·636f·6465·3e0a··08"><pre><code>. | |||
| 0003b8c0:·2320·4669·6e64·2077·6869·6368·2066·696c··#·Find·which·fil | |||
| 0003b8d0:·6573·2068·6176·6520·696e·636f·7272·6563··es·have·incorrec | |||
| 0003b8e0:·7420·6861·7368·2028·6e6f·7420·696e·202f··t·hash·(not·in·/ | |||
| 0003b8f0:·6574·632c·2062·6563·6175·7365·206f·6620··etc,·because·of· | |||
| 0003b900:·7468·6520·7379·7374·656d·2072·656c·6174··the·system·relat | |||
| 0003b910:·6564·2063·6f6e·6669·6720·6669·6c65·7329··ed·config·files) | |||
| 0003b920:·2061·6e64·2074·6865·6e20·6765·7420·6669···and·then·get·fi | |||
| 0003b930:·6c65·7320·6e61·6d65·730a·6669·6c65·735f··les·names.files_ | |||
| 0003b940:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003b950:·6173·683d·2224·2872·706d·202d·5661·202d··ash="$(rpm·-Va·- | |||
| 0003b960:·2d6e·6f63·6f6e·6669·6720·7c20·6772·6570··-noconfig·|·grep | |||
| 0003b970:·202d·4520·275e·2e2e·3527·207c·2061·776b···-E·'^..5'·|·awk | |||
| 0003b980:·2027·7b70·7269·6e74·2024·4e46·7d27·2029···'{print·$NF}'·) | |||
| 0003b990:·220a·0a69·6620·5b20·2d6e·2022·2466·696c··"..if·[·-n·"$fil | |||
| 0003b9a0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b9b0:·745f·6861·7368·2220·5d3b·2074·6865·6e0a··t_hash"·];·then. | |||
| 0003b9c0:·2020·2020·2320·4672·6f6d·2066·696c·6573······#·From·files | |||
| 0003b9d0:·206e·616d·6573·2067·6574·2070·6163·6b61···names·get·packa | |||
| 0003b9e0:·6765·206e·616d·6573·2061·6e64·2063·6861··ge·names·and·cha | |||
| 0003b9f0:·6e67·6520·6e65·776c·696e·6520·746f·2073··nge·newline·to·s | |||
| 0003ba00:·7061·6365·2c20·6265·6361·7573·6520·7270··pace,·because·rp | |||
| 0003ba10:·6d20·7772·6974·6573·2065·6163·6820·7061··m·writes·each·pa | |||
| 0003ba20:·636b·6167·6520·746f·206e·6577·206c·696e··ckage·to·new·lin | |||
| 0003ba30:·650a·2020·2020·7061·636b·6167·6573·5f74··e.····packages_t | |||
| 0003ba40:·6f5f·7265·696e·7374·616c·6c3d·2224·2872··o_reinstall="$(r | |||
| 0003ba50:·706d·202d·7166·2024·6669·6c65·735f·7769··pm·-qf·$files_wi | |||
| 0003ba60:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003ba70:·6820·7c20·7472·2027·5c6e·2720·2720·2729··h·|·tr·'\n'·'·') | |||
| 0003ba80:·220a·0a20·2020·200a·2020·2020·646e·6620··"..····.····dnf· | |||
| 0003ba90:·7265·696e·7374·616c·6c20·2d79·2024·7061··reinstall·-y·$pa | |||
| 0003baa0:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | |||
| 0003bab0:·616c·6c0a·2020·2020·0a66·690a·3c2f·636f··all.····.fi.</co | |||
| 0003bac0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003bad0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003bae0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003baf0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003bb00:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bb10:·646d·3639·3039·2220·7461·6269·6e64·6578··dm6909"·tabindex | |||
| 0003bb20:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bb30:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bb40:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bb50:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bb60:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b | 0003bb70:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b | 0003bb80:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003b | 0003bb90:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003bba0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003bbb0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003bbc0:·6d36·3930·3922·3e3c·7461·626c·6520·636c··m6909"><table·cl | ||
| 0003b | 0003bbd0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b | 0003bbe0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b | 0003bbf0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b | 0003bc00:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b | 0003bc10:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b | 0003bc20:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003b | 0003bc30:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003bc40:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003b | 0003bc50:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003b | 0003bc60:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003bc70:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b | 0003bc80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b | 0003bc90:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b | 0003bca0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003b | 0003bcb0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b | 0003bcc0:·636f·6465·3e2d·206e·616d·653a·2027·5365··code>-·name:·'Se | ||
| 0003b | 0003bcd0:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003b | 0003bce0:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003b | 0003bcf0:·6c20·636f·6d6d·616e·6427·0a20·2073·6574··l·command'.··set | ||
| 0003b | 0003bd00:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | ||
| 0003b | 0003bd10:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | ||
| 0003b | 0003bd20:·7461·6c6c·5f63·6d64·3a20·646e·6620·7265··tall_cmd:·dnf·re | ||
| 0003b | 0003bd30:·696e·7374·616c·6c20·2d79·0a20·2077·6865··install·-y.··whe | ||
| 0003b | 0003bd40:·6e3a·2061·6e73·6962·6c65·5f64·6973·7472··n:·ansible_distr | ||
| 0003b | 0003bd50:·6962·7574·696f·6e20·696e·205b·2022·4665··ibution·in·[·"Fe | ||
| 0003b | 0003bd60:·646f·7261·222c·2022·5265·6448·6174·222c··dora",·"RedHat", | ||
| 0003b | 0003bd70:·2022·4365·6e74·4f53·222c·2022·4f72·6163···"CentOS",·"Orac | ||
| 0003b | 0003bd80:·6c65·4c69·6e75·7822·205d·0a20·2074·6167··leLinux"·].··tag | ||
| 0003b | 0003bd90:·733a·0a20·202d·2043·4345·2d38·3939·3434··s:.··-·CCE-89944 | ||
| 0003b | 0003bda0:·2d33·0a20·202d·2043·4a49·532d·352e·3130··-3.··-·CJIS-5.10 | ||
| 0003baa0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | |||
| 0003bab0:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | |||
| 0003bac0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | |||
| 0003bad0:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | |||
| 0003bae0:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | |||
| 0003baf0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003bb00:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | |||
| 0003bb10:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | |||
| 0003bb20:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | |||
| 0003bb30:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003bb40:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | |||
| 0003bb50:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | |||
| 0003bb60:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003bb70:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003bb80:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | |||
| 0003bb90:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | |||
| 0003bba0:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | |||
| 0003bbb0:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | |||
| 0003bbc0:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | |||
| Max diff block lines reached; 10912185/10954191 bytes (99.62%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 46 | ··············Base | 46 | ··············Base |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:10 | 49 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 115, 14 lines modified | Offset 115, 27 lines modified | ||
| 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 124 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 125 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 126 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 127 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 128 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 129 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 127 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 135 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 128 | ··set_fact: | 136 | ··set_fact: |
| Offset 254, 27 lines modified | Offset 267, 14 lines modified | ||
| 254 | ··-·PCI-DSSv4-11.5.2 | 267 | ··-·PCI-DSSv4-11.5.2 |
| 255 | ··-·high_complexity | 268 | ··-·high_complexity |
| 256 | ··-·high_severity | 269 | ··-·high_severity |
| 257 | ··-·medium_disruption | 270 | ··-·medium_disruption |
| 258 | ··-·no_reboot_needed | 271 | ··-·no_reboot_needed |
| 259 | ··-·restrict_strategy | 272 | ··-·restrict_strategy |
| 260 | ··-·rpm_verify_hashes | 273 | ··-·rpm_verify_hashes |
| 261 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 262 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 263 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 264 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 265 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 266 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 267 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 268 | fi | ||
| 269 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 274 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 270 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 275 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 271 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 276 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 272 | run·the·following·command·to·determine·which·package·owns·it: | 277 | run·the·following·command·to·determine·which·package·owns·it: |
| 273 | $·rpm·-qf·FILENAME | 278 | $·rpm·-qf·FILENAME |
| 274 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 279 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 275 | $·sudo·rpm·--setugids·PACKAGENAME | 280 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 294, 14 lines modified | Offset 294, 40 lines modified | ||
| 294 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 294 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 295 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 295 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 296 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 296 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 297 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 297 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 299 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 299 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 300 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 300 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 306 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 307 | declare·-A·SETPERMS_RPM_DICT | ||
| 308 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 309 | #·is·expected·by·the·RPM·database | ||
| 310 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 311 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 312 | do | ||
| 313 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 314 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 315 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 316 | done | ||
| 317 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 318 | #·correct·values | ||
| 319 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 320 | do | ||
| 321 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 322 | done | ||
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 306 | -·name:·Read·list·of·files·with·incorrect·ownership | 328 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 307 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 329 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 379, 40 lines modified | Offset 405, 14 lines modified | ||
| 379 | ··-·PCI-DSSv4-11.5.2 | 405 | ··-·PCI-DSSv4-11.5.2 |
| 380 | ··-·high_complexity | 406 | ··-·high_complexity |
| 381 | ··-·high_severity | 407 | ··-·high_severity |
| 382 | ··-·medium_disruption | 408 | ··-·medium_disruption |
| 383 | ··-·no_reboot_needed | 409 | ··-·no_reboot_needed |
| 384 | ··-·restrict_strategy | 410 | ··-·restrict_strategy |
| 385 | ··-·rpm_verify_ownership | 411 | ··-·rpm_verify_ownership |
| 386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 387 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 388 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 389 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 390 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 391 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1148207/1155922 bytes (99.33%) of diff not shown. | |||
| Offset 14318, 15 lines modified | Offset 14318, 15 lines modified | ||
| 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | 00037f30:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037f40:·3 | 00037f40:·3729·0a20·2020·2020·2020·2020·2020·2020··7).············· | ||
| 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15236, 306 lines modified | Offset 15236, 306 lines modified | ||
| 0003b830:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b830:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b840:·6d36·3930·3822·2074·6162·696e·6465·783d··m6908"·tabindex= | 0003b840:·6d36·3930·3822·2074·6162·696e·6465·783d··m6908"·tabindex= | ||
| 0003b850:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b850:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b860:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b860:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b870:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b870:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b880:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b880:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b890:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b890:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b8a0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b8b0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b8c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b8d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b8e0:·6170·7365·2220·6964·3d22·6964·6d36·3930··apse"·id="idm690 | |||
| 0003b8f0:·3822·3e3c·7072·653e·3c63·6f64·653e·0a23··8"><pre><code>.# | |||
| 0003b900:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | |||
| 0003b910:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | |||
| 0003b920:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | |||
| 0003b930:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | |||
| 0003b940:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | |||
| 0003b950:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | |||
| 0003b960:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | |||
| 0003b970:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | |||
| 0003b980:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b990:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | |||
| 0003b9a0:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | |||
| 0003b9b0:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | |||
| 0003b9c0:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | |||
| 0003b9d0:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | |||
| 0003b9e0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003b9f0:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | |||
| 0003ba00:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | |||
| 0003ba10:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | |||
| 0003ba20:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | |||
| 0003ba30:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | |||
| 0003ba40:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | |||
| 0003ba50:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | |||
| 0003ba60:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | |||
| 0003ba70:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | |||
| 0003ba80:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | |||
| 0003ba90:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | |||
| 0003baa0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003bab0:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | |||
| 0003bac0:·0a0a·2020·2020·0a20·2020·2064·6e66·2072··..····.····dnf·r | |||
| 0003bad0:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | |||
| 0003bae0:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003baf0:·6c6c·0a20·2020·200a·6669·0a3c·2f63·6f64··ll.····.fi.</cod | |||
| 0003bb00:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003bb10:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bb20:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003bb30:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003bb40:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003bb50:·6d36·3930·3922·2074·6162·696e·6465·783d··m6909"·tabindex= | |||
| 0003bb60:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bb70:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bb80:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bb90:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003bba0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b | 0003bbb0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b | 0003bbc0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b | 0003bbd0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b | 0003bbe0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003bbf0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003bc00:·3639·3039·223e·3c74·6162·6c65·2063·6c61··6909"><table·cla | ||
| 0003b | 0003bc10:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003bc20:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003bc30:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003bc40:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003bc50:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003bc60:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b | 0003bc70:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003bc80:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b | 0003bc90:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b | 0003bca0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003bcb0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003bcc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003bcd0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b | 0003bce0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b | 0003bcf0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b | 0003bd00:·6f64·653e·2d20·6e61·6d65·3a20·2753·6574··ode>-·name:·'Set | ||
| 0003b | 0003bd10:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| 0003b | 0003bd20:·616e·6167·6572·2072·6569·6e73·7461·6c6c··anager·reinstall | ||
| 0003b | 0003bd30:·2063·6f6d·6d61·6e64·270a·2020·7365·745f···command'.··set_ | ||
| 0003b | 0003bd40:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003b | 0003bd50:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003b | 0003bd60:·616c·6c5f·636d·643a·2064·6e66·2072·6569··all_cmd:·dnf·rei | ||
| 0003b | 0003bd70:·6e73·7461·6c6c·202d·790a·2020·7768·656e··nstall·-y.··when | ||
| 0003b | 0003bd80:·3a20·616e·7369·626c·655f·6469·7374·7269··:·ansible_distri | ||
| 0003b | 0003bd90:·6275·7469·6f6e·2069·6e20·5b20·2246·6564··bution·in·[·"Fed | ||
| 0003b | 0003bda0:·6f72·6122·2c20·2252·6564·4861·7422·2c20··ora",·"RedHat",· | ||
| 0003b | 0003bdb0:·2243·656e·744f·5322·2c20·224f·7261·636c··"CentOS",·"Oracl | ||
| 0003b | 0003bdc0:·654c·696e·7578·2220·5d0a·2020·7461·6773··eLinux"·].··tags | ||
| 0003b | 0003bdd0:·3a0a·2020·2d20·4343·452d·3839·3934·342d··:.··-·CCE-89944- | ||
| 0003b | 0003bde0:·330a·2020·2d20·434a·4953·2d35·2e31·302e··3.··-·CJIS-5.10. | ||
| 0003bae0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | |||
| 0003baf0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | |||
| 0003bb00:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | |||
| 0003bb10:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | |||
| 0003bb20:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | |||
| 0003bb30:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | |||
| 0003bb40:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003bb50:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | |||
| 0003bb60:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | |||
| 0003bb70:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003bb80:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | |||
| 0003bb90:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | |||
| 0003bba0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003bbb0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003bbc0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | |||
| 0003bbd0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | |||
| 0003bbe0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | |||
| 0003bbf0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | |||
| 0003bc00:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | |||
| Max diff block lines reached; 10911840/10953846 bytes (99.62%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 47 | ··············Secret | 47 | ··············Secret |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 116, 14 lines modified | Offset 116, 27 lines modified | ||
| 116 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 116 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 117 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 117 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 125 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 126 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 127 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 128 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 129 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 130 | fi | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 128 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 136 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 129 | ··set_fact: | 137 | ··set_fact: |
| Offset 255, 27 lines modified | Offset 268, 14 lines modified | ||
| 255 | ··-·PCI-DSSv4-11.5.2 | 268 | ··-·PCI-DSSv4-11.5.2 |
| 256 | ··-·high_complexity | 269 | ··-·high_complexity |
| 257 | ··-·high_severity | 270 | ··-·high_severity |
| 258 | ··-·medium_disruption | 271 | ··-·medium_disruption |
| 259 | ··-·no_reboot_needed | 272 | ··-·no_reboot_needed |
| 260 | ··-·restrict_strategy | 273 | ··-·restrict_strategy |
| 261 | ··-·rpm_verify_hashes | 274 | ··-·rpm_verify_hashes |
| 262 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 263 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 264 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 265 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 266 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 267 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 268 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 269 | fi | ||
| 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 275 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 271 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 276 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 272 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 277 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 273 | run·the·following·command·to·determine·which·package·owns·it: | 278 | run·the·following·command·to·determine·which·package·owns·it: |
| 274 | $·rpm·-qf·FILENAME | 279 | $·rpm·-qf·FILENAME |
| 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 280 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 276 | $·sudo·rpm·--setugids·PACKAGENAME | 281 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 295, 14 lines modified | Offset 295, 40 lines modified | ||
| 295 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 295 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 296 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 296 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 297 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 297 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 298 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 298 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 299 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 299 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 300 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 300 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 301 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 301 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 303 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 304 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 305 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 306 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 307 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 308 | declare·-A·SETPERMS_RPM_DICT | ||
| 309 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 310 | #·is·expected·by·the·RPM·database | ||
| 311 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 312 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 313 | do | ||
| 314 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 315 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 316 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 317 | done | ||
| 318 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 319 | #·correct·values | ||
| 320 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 321 | do | ||
| 322 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 323 | done | ||
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 303 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 325 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 304 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 326 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 305 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 327 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 306 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 328 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 307 | -·name:·Read·list·of·files·with·incorrect·ownership | 329 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 308 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 330 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 380, 40 lines modified | Offset 406, 14 lines modified | ||
| 380 | ··-·PCI-DSSv4-11.5.2 | 406 | ··-·PCI-DSSv4-11.5.2 |
| 381 | ··-·high_complexity | 407 | ··-·high_complexity |
| 382 | ··-·high_severity | 408 | ··-·high_severity |
| 383 | ··-·medium_disruption | 409 | ··-·medium_disruption |
| 384 | ··-·no_reboot_needed | 410 | ··-·no_reboot_needed |
| 385 | ··-·restrict_strategy | 411 | ··-·restrict_strategy |
| 386 | ··-·rpm_verify_ownership | 412 | ··-·rpm_verify_ownership |
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 392 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1148207/1155931 bytes (99.33%) of diff not shown. | |||
| Offset 14315, 15 lines modified | Offset 14315, 15 lines modified | ||
| 00037ea0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037ea0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037eb0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037eb0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037ec0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037ec0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037ed0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037ed0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037ee0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037ee0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037ef0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037ef0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037f00:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037f00:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037f10:·3032·342d·3131·2d30·3 | 00037f10:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 00037f20:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037f20:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037f30:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037f30:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037f40:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037f40:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037f50:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037f50:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037f60:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037f60:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037f70:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037f70:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037f80:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037f80:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15234, 305 lines modified | Offset 15234, 305 lines modified | ||
| 0003b810:·6765·743d·2223·6964·6d36·3930·3822·2074··get="#idm6908"·t | 0003b810:·6765·743d·2223·6964·6d36·3930·3822·2074··get="#idm6908"·t | ||
| 0003b820:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b820:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b830:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b830:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b840:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b840:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b850:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b850:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b860:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b860:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b870:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b870:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b880:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003b890:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b8a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b8b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b8c0:·3d22·6964·6d36·3930·3822·3e3c·7072·653e··="idm6908"><pre> | |||
| 0003b8d0:·3c63·6f64·653e·0a23·2046·696e·6420·7768··<code>.#·Find·wh | |||
| 0003b8e0:·6963·6820·6669·6c65·7320·6861·7665·2069··ich·files·have·i | |||
| 0003b8f0:·6e63·6f72·7265·6374·2068·6173·6820·286e··ncorrect·hash·(n | |||
| 0003b900:·6f74·2069·6e20·2f65·7463·2c20·6265·6361··ot·in·/etc,·beca | |||
| 0003b910:·7573·6520·6f66·2074·6865·2073·7973·7465··use·of·the·syste | |||
| 0003b920:·6d20·7265·6c61·7465·6420·636f·6e66·6967··m·related·config | |||
| 0003b930:·2066·696c·6573·2920·616e·6420·7468·656e···files)·and·then | |||
| 0003b940:·2067·6574·2066·696c·6573·206e·616d·6573···get·files·names | |||
| 0003b950:·0a66·696c·6573·5f77·6974·685f·696e·636f··.files_with_inco | |||
| 0003b960:·7272·6563·745f·6861·7368·3d22·2428·7270··rrect_hash="$(rp | |||
| 0003b970:·6d20·2d56·6120·2d2d·6e6f·636f·6e66·6967··m·-Va·--noconfig | |||
| 0003b980:·207c·2067·7265·7020·2d45·2027·5e2e·2e35···|·grep·-E·'^..5 | |||
| 0003b990:·2720·7c20·6177·6b20·277b·7072·696e·7420··'·|·awk·'{print· | |||
| 0003b9a0:·244e·467d·2720·2922·0a0a·6966·205b·202d··$NF}'·)"..if·[·- | |||
| 0003b9b0:·6e20·2224·6669·6c65·735f·7769·7468·5f69··n·"$files_with_i | |||
| 0003b9c0:·6e63·6f72·7265·6374·5f68·6173·6822·205d··ncorrect_hash"·] | |||
| 0003b9d0:·3b20·7468·656e·0a20·2020·2023·2046·726f··;·then.····#·Fro | |||
| 0003b9e0:·6d20·6669·6c65·7320·6e61·6d65·7320·6765··m·files·names·ge | |||
| 0003b9f0:·7420·7061·636b·6167·6520·6e61·6d65·7320··t·package·names· | |||
| 0003ba00:·616e·6420·6368·616e·6765·206e·6577·6c69··and·change·newli | |||
| 0003ba10:·6e65·2074·6f20·7370·6163·652c·2062·6563··ne·to·space,·bec | |||
| 0003ba20:·6175·7365·2072·706d·2077·7269·7465·7320··ause·rpm·writes· | |||
| 0003ba30:·6561·6368·2070·6163·6b61·6765·2074·6f20··each·package·to· | |||
| 0003ba40:·6e65·7720·6c69·6e65·0a20·2020·2070·6163··new·line.····pac | |||
| 0003ba50:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003ba60:·6c6c·3d22·2428·7270·6d20·2d71·6620·2466··ll="$(rpm·-qf·$f | |||
| 0003ba70:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | |||
| 0003ba80:·6563·745f·6861·7368·207c·2074·7220·275c··ect_hash·|·tr·'\ | |||
| 0003ba90:·6e27·2027·2027·2922·0a0a·2020·2020·0a20··n'·'·')"..····.· | |||
| 0003baa0:·2020·2064·6e66·2072·6569·6e73·7461·6c6c·····dnf·reinstall | |||
| 0003bab0:·202d·7920·2470·6163·6b61·6765·735f·746f···-y·$packages_to | |||
| 0003bac0:·5f72·6569·6e73·7461·6c6c·0a20·2020·200a··_reinstall.····. | |||
| 0003bad0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003bae0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003baf0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bb00:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bb10:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bb20:·6765·743d·2223·6964·6d36·3930·3922·2074··get="#idm6909"·t | |||
| 0003bb30:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003bb40:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bb50:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bb60:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bb70:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003bb80:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b | 0003bb90:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003b | 0003bba0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003bbb0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003bbc0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003bbd0:·2069·643d·2269·646d·3639·3039·223e·3c74···id="idm6909"><t | ||
| 0003b | 0003bbe0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b | 0003bbf0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b | 0003bc00:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b | 0003bc10:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b | 0003bc20:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b | 0003bc30:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003b | 0003bc40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003bc50:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b | 0003bc60:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003b | 0003bc70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003bc80:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b | 0003bc90:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b | 0003bca0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b | 0003bcb0:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003b | 0003bcc0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003b | 0003bcd0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003b | 0003bce0:·6d65·3a20·2753·6574·2066·6163·743a·2050··me:·'Set·fact:·P | ||
| 0003b | 0003bcf0:·6163·6b61·6765·206d·616e·6167·6572·2072··ackage·manager·r | ||
| 0003b | 0003bd00:·6569·6e73·7461·6c6c·2063·6f6d·6d61·6e64··einstall·command | ||
| 0003b | 0003bd10:·270a·2020·7365·745f·6661·6374·3a0a·2020··'.··set_fact:.·· | ||
| 0003b | 0003bd20:·2020·7061·636b·6167·655f·6d61·6e61·6765····package_manage | ||
| 0003b | 0003bd30:·725f·7265·696e·7374·616c·6c5f·636d·643a··r_reinstall_cmd: | ||
| 0003b | 0003bd40:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | ||
| 0003b | 0003bd50:·790a·2020·7768·656e·3a20·616e·7369·626c··y.··when:·ansibl | ||
| 0003b | 0003bd60:·655f·6469·7374·7269·6275·7469·6f6e·2069··e_distribution·i | ||
| 0003b | 0003bd70:·6e20·5b20·2246·6564·6f72·6122·2c20·2252··n·[·"Fedora",·"R | ||
| 0003b | 0003bd80:·6564·4861·7422·2c20·2243·656e·744f·5322··edHat",·"CentOS" | ||
| 0003b | 0003bd90:·2c20·224f·7261·636c·654c·696e·7578·2220··,·"OracleLinux"· | ||
| 0003b | 0003bda0:·5d0a·2020·7461·6773·3a0a·2020·2d20·4343··].··tags:.··-·CC | ||
| 0003b | 0003bdb0:·452d·3839·3934·342d·330a·2020·2d20·434a··E-89944-3.··-·CJ | ||
| 0003b | 0003bdc0:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003b | 0003bdd0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003b | 0003bde0:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003b | 0003bdf0:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003b | 0003be00:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003b | 0003be10:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b | 0003be20:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003b | 0003be30:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003b | 0003be40:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b | 0003be50:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003b | 0003be60:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003b | 0003be70:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b | 0003be80:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003b | 0003be90:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003b | 0003bea0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003b | 0003beb0:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003b | 0003bec0:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003b | 0003bed0:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003b | 0003bee0:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003b | 0003bef0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| Max diff block lines reached; 10911840/10953708 bytes (99.62%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 46 | ··············Top·Secret | 46 | ··············Top·Secret |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:10 | 49 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 115, 14 lines modified | Offset 115, 27 lines modified | ||
| 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 124 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 125 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 126 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 127 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 128 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 129 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 127 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 135 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 128 | ··set_fact: | 136 | ··set_fact: |
| Offset 254, 27 lines modified | Offset 267, 14 lines modified | ||
| 254 | ··-·PCI-DSSv4-11.5.2 | 267 | ··-·PCI-DSSv4-11.5.2 |
| 255 | ··-·high_complexity | 268 | ··-·high_complexity |
| 256 | ··-·high_severity | 269 | ··-·high_severity |
| 257 | ··-·medium_disruption | 270 | ··-·medium_disruption |
| 258 | ··-·no_reboot_needed | 271 | ··-·no_reboot_needed |
| 259 | ··-·restrict_strategy | 272 | ··-·restrict_strategy |
| 260 | ··-·rpm_verify_hashes | 273 | ··-·rpm_verify_hashes |
| 261 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 262 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 263 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 264 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 265 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 266 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 267 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 268 | fi | ||
| 269 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 274 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 270 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 275 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 271 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 276 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 272 | run·the·following·command·to·determine·which·package·owns·it: | 277 | run·the·following·command·to·determine·which·package·owns·it: |
| 273 | $·rpm·-qf·FILENAME | 278 | $·rpm·-qf·FILENAME |
| 274 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 279 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 275 | $·sudo·rpm·--setugids·PACKAGENAME | 280 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 294, 14 lines modified | Offset 294, 40 lines modified | ||
| 294 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 294 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 295 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 295 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 296 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 296 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 297 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 297 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 299 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 299 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 300 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 300 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 306 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 307 | declare·-A·SETPERMS_RPM_DICT | ||
| 308 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 309 | #·is·expected·by·the·RPM·database | ||
| 310 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 311 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 312 | do | ||
| 313 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 314 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 315 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 316 | done | ||
| 317 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 318 | #·correct·values | ||
| 319 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 320 | do | ||
| 321 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 322 | done | ||
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 306 | -·name:·Read·list·of·files·with·incorrect·ownership | 328 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 307 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 329 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 379, 40 lines modified | Offset 405, 14 lines modified | ||
| 379 | ··-·PCI-DSSv4-11.5.2 | 405 | ··-·PCI-DSSv4-11.5.2 |
| 380 | ··-·high_complexity | 406 | ··-·high_complexity |
| 381 | ··-·high_severity | 407 | ··-·high_severity |
| 382 | ··-·medium_disruption | 408 | ··-·medium_disruption |
| 383 | ··-·no_reboot_needed | 409 | ··-·no_reboot_needed |
| 384 | ··-·restrict_strategy | 410 | ··-·restrict_strategy |
| 385 | ··-·rpm_verify_ownership | 411 | ··-·rpm_verify_ownership |
| 386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 387 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 388 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 389 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 390 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 391 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1148207/1155939 bytes (99.33%) of diff not shown. | |||
| Offset 14307, 15 lines modified | Offset 14307, 15 lines modified | ||
| 00037e20:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037e20:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037e30:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037e30:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037e40:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037e40:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037e50:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037e50:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037e60:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037e60:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037e70:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037e70:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037e80:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037e80:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e90:·6f66·2032·3032·342d·3131·2d30·3 | 00037e90:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037ea0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037eb0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037eb0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037ec0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037ec0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037ed0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037ed0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037ee0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037ee0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037ef0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037ef0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037f00:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037f00:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15215, 306 lines modified | Offset 15215, 306 lines modified | ||
| 0003b6e0:·7461·7267·6574·3d22·2369·646d·3639·3038··target="#idm6908 | 0003b6e0:·7461·7267·6574·3d22·2369·646d·3639·3038··target="#idm6908 | ||
| 0003b6f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b6f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b700:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b700:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b710:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b710:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b720:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b720:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b730:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b730:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b740:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b740:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b750:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b760:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b770:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b780:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b790:·2069·643d·2269·646d·3639·3038·223e·3c70···id="idm6908"><p | |||
| 0003b7a0:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003b7b0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003b7c0:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003b7d0:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003b7e0:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003b7f0:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003b800:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003b810:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003b820:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003b830:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003b840:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003b850:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003b860:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003b870:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003b880:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003b890:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003b8a0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003b8b0:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003b8c0:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003b8d0:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003b8e0:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003b8f0:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003b900:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003b910:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003b920:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003b930:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003b940:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003b950:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003b960:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003b970:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | |||
| 0003b980:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003b990:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003b9a0:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003b9b0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b9c0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b9d0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b9e0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b9f0:·7461·7267·6574·3d22·2369·646d·3639·3039··target="#idm6909 | |||
| 0003ba00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ba10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003ba20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ba30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ba40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ba50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b | 0003ba60:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003b | 0003ba70:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b | 0003ba80:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003ba90:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003baa0:·7365·2220·6964·3d22·6964·6d36·3930·3922··se"·id="idm6909" | ||
| 0003b | 0003bab0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003bac0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003bad0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003bae0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003baf0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003bb00:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003b | 0003bb10:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003b | 0003bb20:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b | 0003bb30:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003b | 0003bb40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003bb50:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003bb60:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003bb70:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003bb80:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003b | 0003bb90:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003b | 0003bba0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003b | 0003bbb0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003b | 0003bbc0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003b | 0003bbd0:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003b | 0003bbe0:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003b | 0003bbf0:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003b | 0003bc00:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003b | 0003bc10:·6d64·3a20·646e·6620·7265·696e·7374·616c··md:·dnf·reinstal | ||
| 0003b | 0003bc20:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | ||
| 0003b | 0003bc30:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003b | 0003bc40:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003b | 0003bc50:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003b | 0003bc60:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003b | 0003bc70:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003b | 0003bc80:·2043·4345·2d38·3939·3434·2d33·0a20·202d···CCE-89944-3.··- | ||
| 0003b | 0003bc90:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003b | 0003bca0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003bcb0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003b | 0003bcc0:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003b | 0003bcd0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003b | 0003bce0:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003b | 0003bcf0:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003b | 0003bd00:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b | 0003bd10:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003b | 0003bd20:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003b | 0003bd30:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003b | 0003bd40:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b | 0003bd50:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003b | 0003bd60:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003b | 0003bd70:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003b | 0003bd80:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003b | 0003bd90:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003b | 0003bda0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003b | 0003bdb0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003b | 0003bdc0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| Max diff block lines reached; 15940415/15982421 bytes (99.74%) of diff not shown. | |||
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise |
| 45 | ··············Linux·10 | 45 | ··············Linux·10 |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux:10 | 48 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 112, 14 lines modified | Offset 112, 27 lines modified | ||
| 112 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 112 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 113 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 113 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 114 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 114 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 115 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 115 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 120 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 121 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 122 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 123 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 124 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 125 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 126 | fi | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 124 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 132 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 125 | ··set_fact: | 133 | ··set_fact: |
| Offset 251, 27 lines modified | Offset 264, 14 lines modified | ||
| 251 | ··-·PCI-DSSv4-11.5.2 | 264 | ··-·PCI-DSSv4-11.5.2 |
| 252 | ··-·high_complexity | 265 | ··-·high_complexity |
| 253 | ··-·high_severity | 266 | ··-·high_severity |
| 254 | ··-·medium_disruption | 267 | ··-·medium_disruption |
| 255 | ··-·no_reboot_needed | 268 | ··-·no_reboot_needed |
| 256 | ··-·restrict_strategy | 269 | ··-·restrict_strategy |
| 257 | ··-·rpm_verify_hashes | 270 | ··-·rpm_verify_hashes |
| 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 259 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 260 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 261 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 262 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 263 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 264 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 265 | fi | ||
| 266 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 271 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 267 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 272 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 268 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 273 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 269 | run·the·following·command·to·determine·which·package·owns·it: | 274 | run·the·following·command·to·determine·which·package·owns·it: |
| 270 | $·rpm·-qf·FILENAME | 275 | $·rpm·-qf·FILENAME |
| 271 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 276 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 272 | $·sudo·rpm·--setugids·PACKAGENAME | 277 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 291, 14 lines modified | Offset 291, 40 lines modified | ||
| 291 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 291 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 292 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 292 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 293 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 293 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 294 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 294 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 295 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 295 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 296 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 296 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 297 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 297 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 303 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 304 | declare·-A·SETPERMS_RPM_DICT | ||
| 305 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 306 | #·is·expected·by·the·RPM·database | ||
| 307 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 308 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 309 | do | ||
| 310 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 311 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 312 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 313 | done | ||
| 314 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 315 | #·correct·values | ||
| 316 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 317 | do | ||
| 318 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 319 | done | ||
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 321 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 322 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 323 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 324 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 303 | -·name:·Read·list·of·files·with·incorrect·ownership | 325 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 304 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 326 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 376, 40 lines modified | Offset 402, 14 lines modified | ||
| 376 | ··-·PCI-DSSv4-11.5.2 | 402 | ··-·PCI-DSSv4-11.5.2 |
| 377 | ··-·high_complexity | 403 | ··-·high_complexity |
| 378 | ··-·high_severity | 404 | ··-·high_severity |
| 379 | ··-·medium_disruption | 405 | ··-·medium_disruption |
| 380 | ··-·no_reboot_needed | 406 | ··-·no_reboot_needed |
| 381 | ··-·restrict_strategy | 407 | ··-·restrict_strategy |
| 382 | ··-·rpm_verify_ownership | 408 | ··-·rpm_verify_ownership |
| 383 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 384 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 385 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 386 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 387 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 388 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1583734/1591466 bytes (99.51%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | 00037e40:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037e50:·3 | 00037e50:·3729·0a20·2020·2020·2020·2020·2020·2020··7).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15130, 234 lines modified | Offset 15130, 234 lines modified | ||
| 0003b190:·7267·6574·3d22·2369·646d·3732·3530·2220··rget="#idm7250"· | 0003b190:·7267·6574·3d22·2369·646d·3732·3530·2220··rget="#idm7250"· | ||
| 0003b1a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b1a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b1b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b1b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b1c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b1c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b1d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b1d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b1e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b1e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b1f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b1f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b200:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b210:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b220:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b230:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b240:·2069·643d·2269·646d·3732·3530·223e·3c74···id="idm7250"><t | |||
| 0003b250:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b260:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b200:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b210:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b220:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b230:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b240:·2220·6964·3d22·6964·6d37·3235·3022·3e3c··"·id="idm7250">< | |||
| 0003b250:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b260:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b270:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b2 | 0003b270:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b280:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b290:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b2a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b2b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b2c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b290:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b2a0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b2b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b2c0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b2d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b2e0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b2f0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b300:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b310:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b320:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b330:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b340:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b350:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b360:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b370:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b380:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b390:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b3a0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b3b0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b3c0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b3d0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b3e0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b3f0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b400:·4345·2d39·3034·3737·2d31·0a20·202d·2043··CE-90477-1.··-·C | |||
| 0003b410:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b420:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b430:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b440:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b450:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b460:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b470:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b480:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b490:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b4a0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b4b0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b4c0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b4d0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b4e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b4f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b500:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b510:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b520:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b530:·6964·6d37·3235·3122·2074·6162·696e·6465··idm7251"·tabinde | |||
| 0003b540:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b550:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b560:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b570:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b580:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b590:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b5a0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b5b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b5c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b5d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b5e0:·6d37·3235·3122·3e3c·7461·626c·6520·636c··m7251"><table·cl | |||
| 0003b5f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b600:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b610:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b620:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b630:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b2d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b650:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b | 0003b2e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b2f0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b | 0003b300:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b680:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b690:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b6a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b | 0003b310:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b320:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b330:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b340:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b350:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b360:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003b370:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b380:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b390:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b3a0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b3b0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b3c0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b3d0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b3e0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b3f0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b400:·3235·3122·2074·6162·696e·6465·783d·2230··251"·tabindex="0 | |||
| Max diff block lines reached; 33000108/33032178 bytes (99.90%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037e50:·3131·2d30·3 | 00037e50:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15130, 235 lines modified | Offset 15130, 235 lines modified | ||
| 0003b190:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003b190:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b1a0:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b1a0:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b1b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b1b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b1c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b1c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b1d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b1d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b1e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b1e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b1f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b1f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b200:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b210:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b220:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b230:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b240:·7073·6522·2069·643d·2269·646d·3732·3530··pse"·id="idm7250 | |||
| 0003b250:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b260:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b200:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b210:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b220:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b230:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b240:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 0003b250:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b260:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b270:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b2 | 0003b270:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b280:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b290:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b2a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b2b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b2c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b290:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b2a0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b2b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b2c0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b2d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b2e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b2f0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b300:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b310:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b320:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b330:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b340:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b350:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b360:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b370:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b380:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b390:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b3a0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b3b0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b3c0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b3d0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b3e0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b3f0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b400:·202d·2043·4345·2d39·3034·3737·2d31·0a20···-·CCE-90477-1.· | |||
| 0003b410:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b420:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b430:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b440:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b450:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b460:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b470:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b480:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b490:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b4a0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b4b0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b4c0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b4d0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b4e0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b4f0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b500:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b510:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b520:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b530:·743d·2223·6964·6d37·3235·3122·2074·6162··t="#idm7251"·tab | |||
| 0003b540:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b550:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b560:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b570:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b580:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b590:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b5a0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b5b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b5c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b5d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b5e0:·3d22·6964·6d37·3235·3122·3e3c·7461·626c··="idm7251"><tabl | |||
| 0003b5f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b600:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b610:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b620:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b630:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003b2d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b2e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b660:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b670:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b680:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b690:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b6a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b | 0003b2f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b6c0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b6d0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b6e0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b6f0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b700:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b710:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b720:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b730:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b740:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003b750:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b760:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b770:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b780:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b790:·7461·7267·6574·3d22·2369·646d·3732·3532··target="#idm7252 | |||
| 0003b7a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b7b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| Max diff block lines reached; 32908800/32941008 bytes (99.90%) of diff not shown. | |||
| Offset 14451, 15 lines modified | Offset 14451, 15 lines modified | ||
| 00038720:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038720:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038730:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038730:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038740:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038740:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038750:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038750:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038760:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038760:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038770:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038770:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038780:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038780:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038790:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00038790:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 000387a0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000387a0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387b0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387b0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387c0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387c0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387d0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387d0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387e0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387e0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000387f0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000387f0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038800:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038800:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15247, 237 lines modified | Offset 15247, 237 lines modified | ||
| 0003b8e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b8e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b8f0:·2223·6964·6d37·3938·3022·2074·6162·696e··"#idm7980"·tabin | 0003b8f0:·2223·6964·6d37·3938·3022·2074·6162·696e··"#idm7980"·tabin | ||
| 0003b900:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b900:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b910:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b910:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b920:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b920:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b930:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b930:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b940:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b940:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b950:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b950:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | ||
| 0003b960:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b970:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b980:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b990:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b9a0:·6964·6d37·3938·3022·3e3c·7461·626c·6520··idm7980"><table· | |||
| 0003b9b0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b9c0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b9d0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b9e0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b9f0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ba00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ba10:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003ba20:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b960:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b970:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b980:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b990:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b9a0:·2269·646d·3739·3830·223e·3c74·6162·6c65··"idm7980"><table | |||
| 0003b9b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b9c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b9d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b9e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b9f0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ba00:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ba10:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ba20:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ba30:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ba40:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ba50:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ba60:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003ba70:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003ba | 0003ba30:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003ba40:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003ba90:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003baa0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003bab0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003bac0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003bad0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003bae0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003baf0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003bb00:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003bb10:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003bb20:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003bb30:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003bb40:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003bb50:·7461·6773·3a0a·2020·2d20·4343·452d·3830··tags:.··-·CCE-80 | |||
| 0003bb60:·3834·342d·340a·2020·2d20·434a·4953·2d35··844-4.··-·CJIS-5 | |||
| 0003bb70:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003bb80:·2d53·5449·472d·5248·454c·2d30·382d·3031··-STIG-RHEL-08-01 | |||
| 0003bb90:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003bba0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003bbb0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003bbc0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003bbd0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003bbe0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003bbf0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003bc00:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003bc10:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003bc20:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003bc30:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003bc40:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003bc50:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003bc60:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003bc70:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bc80:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bc90:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bca0:·6172·6765·743d·2223·6964·6d37·3938·3122··arget="#idm7981" | |||
| 0003bcb0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bcc0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bcd0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bce0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bcf0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bd00:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bd10:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003bd20:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bd30:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bd40:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bd50:·2220·6964·3d22·6964·6d37·3938·3122·3e3c··"·id="idm7981">< | |||
| 0003bd60:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bd70:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bd80:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bd90:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bda0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bdb0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bdc0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bdd0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bde0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bdf0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003be00:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003be10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003be20:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b | 0003ba50:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003ba60:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003ba70:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003ba80:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003ba90:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003baa0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003bab0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003bac0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003bad0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003bae0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003baf0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003be40:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| Max diff block lines reached; 22261586/22294070 bytes (99.85%) of diff not shown. | |||
| Offset 14450, 15 lines modified | Offset 14450, 15 lines modified | ||
| 00038710:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038710:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038720:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038720:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038730:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038730:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038740:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038740:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038750:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038750:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038760:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038760:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038770:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038770:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038780:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00038780:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00038790:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038790:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000387e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000387e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000387f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000387f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15253, 236 lines modified | Offset 15253, 236 lines modified | ||
| 0003b940:·6574·3d22·2369·646d·3739·3830·2220·7461··et="#idm7980"·ta | 0003b940:·6574·3d22·2369·646d·3739·3830·2220·7461··et="#idm7980"·ta | ||
| 0003b950:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b950:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b960:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b960:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b970:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b970:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b980:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b980:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b990:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b990:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b9a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b9a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b9b0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b9c0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b9d0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b9b0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b9c0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b9d0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b9e0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b9f0:·6964·3d22·6964·6d37·3938·3022·3e3c·7461··id="idm7980"><ta | |||
| 0003ba00:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ba10:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003ba20:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003ba30:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003ba40:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003ba50:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003ba60:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ba70:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003ba80:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ba90:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003baa0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003bab0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bac0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003bad0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003bae0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003baf0:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003bb00:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003bb10:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003bb20:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003bb30:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003bb40:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003bb50:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003bb60:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003bb70:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003bb80:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003bb90:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003bba0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003bbb0:·2d38·3038·3434·2d34·0a20·202d·2043·4a49··-80844-4.··-·CJI | |||
| 0003bbc0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003bbd0:·4953·412d·5354·4947·2d52·4845·4c2d·3038··ISA-STIG-RHEL-08 | |||
| 0003bbe0:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003bbf0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003bc00:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003bc10:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003bc20:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003bc30:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003bc40:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003bc50:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003bc60:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003bc70:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003bc80:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003bc90:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003bca0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003bcb0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bcc0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bcd0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b | 0003b9e0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b9f0:·643d·2269·646d·3739·3830·223e·3c74·6162··d="idm7980"><tab | |||
| 0003ba00:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003ba10:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ba20:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ba30:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ba40:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ba50:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ba60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ba70:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003ba80:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ba90:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003bcf0:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | |||
| 0003bd00:·3831·2220·7461·6269·6e64·6578·3d22·3022··81"·tabindex="0" | |||
| 0003bd10:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bd20:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bd30:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bd40:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bd50:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bd60:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003bd70:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bd80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bd90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bda0:·7073·6522·2069·643d·2269·646d·3739·3831··pse"·id="idm7981 | |||
| 0003bdb0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bdc0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bdd0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bde0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bdf0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003be00:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003be10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003be20:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003be30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003be40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003be50:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003be60:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003be70:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b | 0003baa0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003be90:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b | 0003bab0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003bac0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003bad0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003bae0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003baf0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003bb00:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b | 0003bb10:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | ||
| 0003bb20:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003bb30:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003bb40:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003bec0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| Max diff block lines reached; 22539097/22571443 bytes (99.86%) of diff not shown. | |||
| Offset 14452, 15 lines modified | Offset 14452, 15 lines modified | ||
| 00038730:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038730:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038740:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038740:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038750:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038750:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038760:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038760:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038770:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038770:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038780:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038780:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038790:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038790:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000387a0:·7320·6f66·2032·3032·342d·3131·2d30·3 | 000387a0:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 000387b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000387b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038800:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038800:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038810:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038810:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15243, 237 lines modified | Offset 15243, 237 lines modified | ||
| 0003b8a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b8a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b8b0:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | 0003b8b0:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | ||
| 0003b8c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b8c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b8d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b8d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b8e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b8e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b8f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b8f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b900:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b900:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b910:·6d65·6469·6174·696f·6e20· | 0003b910:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | ||
| 0003b920:· | 0003b920:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b930:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b940:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b950:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b960:·3739·3830·223e·3c74·6162·6c65·2063·6c61··7980"><table·cla | |||
| 0003b970:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b930:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b940:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b950:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b960:·6d37·3938·3022·3e3c·7461·626c·6520·636c··m7980"><table·cl | |||
| 0003b970:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b980:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b9 | 0003b980:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b990:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b9a0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b9b0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b9c0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b9d0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b9e0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b9a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b9b0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b9c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b9d0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b9e0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b9f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ba00:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ba10:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003ba20:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003ba30:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b | 0003b9f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003ba00:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003ba50:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003ba60:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003ba70:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003ba80:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003ba90:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003baa0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bab0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003bac0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003bad0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003bae0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003baf0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003bb00:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003bb10:·733a·0a20·202d·2043·4345·2d38·3038·3434··s:.··-·CCE-80844 | |||
| 0003bb20:·2d34·0a20·202d·2043·4a49·532d·352e·3130··-4.··-·CJIS-5.10 | |||
| 0003bb30:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003bb40:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 0003bb50:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003bb60:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003bb70:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003bb80:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003bb90:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003bba0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003bbb0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003bbc0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003bbd0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003bbe0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003bbf0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003bc00:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003bc10:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003bc20:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bc30:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bc40:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bc50:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bc60:·6574·3d22·2369·646d·3739·3831·2220·7461··et="#idm7981"·ta | |||
| 0003bc70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bc80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bc90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bca0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bcb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bcc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003bcd0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003bce0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bcf0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bd00:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bd10:·643d·2269·646d·3739·3831·223e·3c74·6162··d="idm7981"><tab | |||
| 0003bd20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003bd30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003bd40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003bd50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003bd60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003bd70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bd80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003bd90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003bda0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bdb0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003bdc0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003bdd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003bde0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b | 0003ba10:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003ba20:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003ba30:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003ba40:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003ba50:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003ba60:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003ba70:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003ba80:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003ba90:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003baa0:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003bab0:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003be00:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003be10:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003be20:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| Max diff block lines reached; 9259718/9292202 bytes (99.65%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 69 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 70 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 70 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 131, 54 lines modified | Offset 131, 26 lines modified | ||
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 135 | ·············_\x8c_\x8i_\x8s············5.3.1 | 135 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | -·name:·Ensure·aide·is·installed | ||
| 144 | ··package: | ||
| 145 | ····name:·aide | ||
| 146 | ····state:·present | ||
| 147 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 148 | ··tags: | ||
| 149 | ··-·CCE-80844-4 | ||
| 150 | ··-·CJIS-5.10.1.3 | ||
| 151 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 152 | ··-·NIST-800-53-CM-6(a) | ||
| 153 | ··-·PCI-DSS-Req-11.5 | ||
| 154 | ··-·PCI-DSSv4-11.5.2 | ||
| 155 | ··-·enable_strategy | ||
| 156 | ··-·low_complexity | ||
| 157 | ··-·low_disruption | ||
| 158 | ··-·medium_severity | ||
| 159 | ··-·no_reboot_needed | ||
| 160 | ··-·package_aide_installed | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | include·install_aide | 143 | include·install_aide |
| 167 | class·install_aide·{ | 144 | class·install_aide·{ |
| 168 | ··package·{·'aide': | 145 | ··package·{·'aide': |
| 169 | ····ensure·=>·'installed', | 146 | ····ensure·=>·'installed', |
| 170 | ··} | 147 | ··} |
| 171 | } | 148 | } |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | 154 | #·Remediation·is·applicable·only·in·certain·platforms |
| 182 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 155 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 193, 21 lines modified | Offset 165, 49 lines modified | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 198 | package·install·aide | 170 | package·install·aide |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | [[packages]] | ||
| 173 | name·=·"aide" | ||
| 174 | version·=·"*" | ||
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 204 | package·--add=aide | 180 | package·--add=aide |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | -·name:·Ensure·aide·is·installed | ||
| 187 | ··package: | ||
| 188 | ····name:·aide | ||
| 189 | ····state:·present | ||
| 190 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 191 | ··tags: | ||
| 192 | ··-·CCE-80844-4 | ||
| 193 | ··-·CJIS-5.10.1.3 | ||
| 194 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 195 | ··-·NIST-800-53-CM-6(a) | ||
| 196 | ··-·PCI-DSS-Req-11.5 | ||
| 197 | ··-·PCI-DSSv4-11.5.2 | ||
| 198 | ··-·enable_strategy | ||
| 199 | ··-·low_complexity | ||
| 200 | ··-·low_disruption | ||
| 201 | ··-·medium_severity | ||
| 202 | ··-·no_reboot_needed | ||
| 203 | ··-·package_aide_installed | ||
| 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 206 | Run·the·following·command·to·generate·a·new·database: | 205 | Run·the·following·command·to·generate·a·new·database: |
| 207 | $·sudo·/usr/sbin/aide·--init | 206 | $·sudo·/usr/sbin/aide·--init |
| 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 209 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 208 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 210 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 209 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 211 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 210 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 234, 14 lines modified | Offset 234, 28 lines modified | ||
| 234 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 234 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 235 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 235 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 237 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 237 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 238 | ·············_\x8c_\x8i_\x8s············5.3.1 | 238 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 239 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 239 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| Max diff block lines reached; 1042746/1048148 bytes (99.48%) of diff not shown. | |||
| Offset 14451, 15 lines modified | Offset 14451, 15 lines modified | ||
| 00038720:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038720:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038730:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038730:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038740:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038740:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038750:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038750:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038760:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038760:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038770:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038770:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038780:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038780:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038790:·2032·3032·342d·3131·2d30·3 | 00038790:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 000387a0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000387a0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000387b0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000387b0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 000387c0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 000387c0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 000387d0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 000387d0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000387e0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000387e0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000387f0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000387f0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038800:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038800:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14901, 217 lines modified | Offset 14901, 217 lines modified | ||
| 0003a340:·6765·743d·2223·6964·6d31·3333·3839·2220··get="#idm13389"· | 0003a340:·6765·743d·2223·6964·6d31·3333·3839·2220··get="#idm13389"· | ||
| 0003a350:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003a350:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003a360:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003a360:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003a370:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003a370:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003a380:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003a380:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003a390:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003a390:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003a3a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003a3a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003a3b0:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003a3c0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003a3d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003a3e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a3f0:·2069·643d·2269·646d·3133·3338·3922·3e3c···id="idm13389">< | |||
| 0003a400:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003a410:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003a3b0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003a3c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003a3d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003a3e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003a3f0:·2220·6964·3d22·6964·6d31·3333·3839·223e··"·id="idm13389"> | |||
| 0003a400:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003a410:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003a420:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003a4 | 0003a420:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003a440:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003a450:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003a460:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a470:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003a480:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003a490:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003a4a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003a4b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003a4c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003a4d0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003a4e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003a4f0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003a500:·456e·7375·7265·2064·6e66·2d61·7574·6f6d··Ensure·dnf-autom | |||
| 0003a510:·6174·6963·2069·7320·696e·7374·616c·6c65··atic·is·installe | |||
| 0003a520:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003a530:·206e·616d·653a·2064·6e66·2d61·7574·6f6d···name:·dnf-autom | |||
| 0003a540:·6174·6963·0a20·2020·2073·7461·7465·3a20··atic.····state:· | |||
| 0003a550:·7072·6573·656e·740a·2020·7461·6773·3a0a··present.··tags:. | |||
| 0003a560:·2020·2d20·4343·452d·3832·3938·352d·330a····-·CCE-82985-3. | |||
| 0003a570:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003a580:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003a590:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003a5a0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003a5b0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003a5c0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003a5d0:·6564·0a20·202d·2070·6163·6b61·6765·5f64··ed.··-·package_d | |||
| 0003a5e0:·6e66·2d61·7574·6f6d·6174·6963·5f69·6e73··nf-automatic_ins | |||
| 0003a5f0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003a600:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003a610:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003a620:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003a630:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003a640:·2d74·6172·6765·743d·2223·6964·6d31·3333··-target="#idm133 | |||
| 0003a650:·3930·2220·7461·6269·6e64·6578·3d22·3022··90"·tabindex="0" | |||
| 0003a660:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003a670:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003a680:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003a690:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003a6a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003a6b0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003a6c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003a6d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003a6e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003a6f0:·7073·6522·2069·643d·2269·646d·3133·3339··pse"·id="idm1339 | |||
| 0003a700:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003a710:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003a720:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003a | 0003a430:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003a | 0003a440:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003a | 0003a450:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003a | 0003a460:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003a | 0003a470:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003a780:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a790:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003a7a0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003a7b0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003a7c0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003a7d0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003a7e0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003a7f0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003a800:·6465·2069·6e73·7461·6c6c·5f64·6e66·2d61··de·install_dnf-a | |||
| 0003a810:·7574·6f6d·6174·6963·0a0a·636c·6173·7320··utomatic..class· | |||
| 0003a820:·696e·7374·616c·6c5f·646e·662d·6175·746f··install_dnf-auto | |||
| 0003a830:·6d61·7469·6320·7b0a·2020·7061·636b·6167··matic·{.··packag | |||
| 0003a840:·6520·7b20·2764·6e66·2d61·7574·6f6d·6174··e·{·'dnf-automat | |||
| 0003a850:·6963·273a·0a20·2020·2065·6e73·7572·6520··ic':.····ensure· | |||
| 0003a860:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003a870:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003a880:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003a890:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003a8a0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a8b0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003a8c0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0003a8d0:·3333·3931·2220·7461·6269·6e64·6578·3d22··3391"·tabindex=" | |||
| 0003a8e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003a8f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003a900:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003a910:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003a920:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003a930:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003a940:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003a950:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003a960:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003a970:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003a980:·2220·6964·3d22·6964·6d31·3333·3931·223e··"·id="idm13391"> | |||
| 0003a990:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003a9a0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003a9b0:·2264·6e66·2d61·7574·6f6d·6174·6963·220a··"dnf-automatic". | |||
| Max diff block lines reached; 3129460/3159184 bytes (99.06%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 68 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 69 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 69 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 70 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 70 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 94, 48 lines modified | Offset 94, 26 lines modified | ||
| 94 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 94 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 95 | ·············suitable·for·automatic,·regular·execution. | 95 | ·············suitable·for·automatic,·regular·execution. |
| 96 | Severity: ···medium | 96 | Severity: ···medium |
| 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 98 | Identifiers:·CCE-82985-3 | 98 | Identifiers:·CCE-82985-3 |
| 99 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 99 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 100 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 100 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 106 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 107 | ··package: | ||
| 108 | ····name:·dnf-automatic | ||
| 109 | ····state:·present | ||
| 110 | ··tags: | ||
| 111 | ··-·CCE-82985-3 | ||
| 112 | ··-·enable_strategy | ||
| 113 | ··-·low_complexity | ||
| 114 | ··-·low_disruption | ||
| 115 | ··-·medium_severity | ||
| 116 | ··-·no_reboot_needed | ||
| 117 | ··-·package_dnf-automatic_installed | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | include·install_dnf-automatic | 106 | include·install_dnf-automatic |
| 124 | class·install_dnf-automatic·{ | 107 | class·install_dnf-automatic·{ |
| 125 | ··package·{·'dnf-automatic': | 108 | ··package·{·'dnf-automatic': |
| 126 | ····ensure·=>·'installed', | 109 | ····ensure·=>·'installed', |
| 127 | ··} | 110 | ··} |
| 128 | } | 111 | } |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"dnf-automatic" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 117 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 144, 21 lines modified | Offset 122, 43 lines modified | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | package·install·dnf-automatic | 127 | package·install·dnf-automatic |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"dnf-automatic" | ||
| 131 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | package·--add=dnf-automatic | 137 | package·--add=dnf-automatic |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 144 | ··package: | ||
| 145 | ····name:·dnf-automatic | ||
| 146 | ····state:·present | ||
| 147 | ··tags: | ||
| 148 | ··-·CCE-82985-3 | ||
| 149 | ··-·enable_strategy | ||
| 150 | ··-·low_complexity | ||
| 151 | ··-·low_disruption | ||
| 152 | ··-·medium_severity | ||
| 153 | ··-·no_reboot_needed | ||
| 154 | ··-·package_dnf-automatic_installed | ||
| 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 156 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 158 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 157 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 159 | automatic.conf. | 158 | automatic.conf. |
| 160 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 159 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 161 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 160 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 162 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 161 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 169, 37 lines modified | Offset 169, 14 lines modified | ||
| 169 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 169 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 170 | Identifiers:·CCE-82494-6 | 170 | Identifiers:·CCE-82494-6 |
| 171 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 171 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 172 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 172 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 173 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 173 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 174 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 174 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 175 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 175 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 181 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 182 | ··ini_file: | ||
| 183 | ····dest:·/etc/dnf/automatic.conf | ||
| 184 | ····section:·commands | ||
| 185 | ····option:·apply_updates | ||
| 186 | ····value:·'yes' | ||
| Max diff block lines reached; 201885/207627 bytes (97.23%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038610:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038620:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038620:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038630:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038630:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038640:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038640:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038650:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038650:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038660:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038660:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038670:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038670:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038680:·3230·3234·2d31·312d·303 | 00038680:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00038690:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038690:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 000386a0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 000386a0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 000386b0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 000386b0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 000386c0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 000386c0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 000386d0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 000386d0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 000386e0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 000386e0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 000386f0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 000386f0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15293, 237 lines modified | Offset 15293, 237 lines modified | ||
| 0003bbc0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003bbc0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003bbd0:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | 0003bbd0:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | ||
| 0003bbe0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003bbe0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003bbf0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003bbf0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003bc00:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003bc00:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003bc10:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003bc10:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003bc20:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003bc20:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003bc30:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003bc40:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003bc50:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bc60:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bc70:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003bc80:·3938·3022·3e3c·7461·626c·6520·636c·6173··980"><table·clas | |||
| 0003bc90:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bc30:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003bc40:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003bc50:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bc60:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bc70:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003bc80:·3739·3830·223e·3c74·6162·6c65·2063·6c61··7980"><table·cla | |||
| 0003bc90:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003bca0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003bc | 0003bca0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003bcb0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bcc0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003bcd0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003bce0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bcf0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003bd00:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003bd10:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bd20:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003bcc0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003bcd0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003bce0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003bcf0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003bd00:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003bd10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bd20:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003bd30:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bd40:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003bd50:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003bd60:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003bd70:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003bd80:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003bd90:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003bda0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003bdb0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003bdc0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003bdd0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003bde0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003bdf0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003be00:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003be10:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003be20:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003be30:·3a0a·2020·2d20·4343·452d·3830·3834·342d··:.··-·CCE-80844- | |||
| 0003be40:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003be50:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003be60:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003be70:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003be80:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003be90:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bea0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003beb0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bec0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bed0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bee0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bef0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bf00:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bf10:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bf20:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bf30:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bf40:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bf50:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bf60:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bf70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bf80:·743d·2223·6964·6d37·3938·3122·2074·6162··t="#idm7981"·tab | |||
| 0003bf90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bfa0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bfb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bfc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bfd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bfe0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003bff0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003c000:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c010:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c020:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c030:·3d22·6964·6d37·3938·3122·3e3c·7461·626c··="idm7981"><tabl | |||
| 0003c040:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c050:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c060:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c070:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c080:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c090:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c0a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c0b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c0c0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c0d0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c0e0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003c0f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003c100:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003 | 0003bd30:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003bd40:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003bd50:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003bd60:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003bd70:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003bd80:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003bd90:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003bda0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003bdb0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003bdc0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003bdd0:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| Max diff block lines reached; 25519727/25552211 bytes (99.87%) of diff not shown. | |||
| Offset 14435, 15 lines modified | Offset 14435, 15 lines modified | ||
| 00038620:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00038620:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00038630:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00038630:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038640:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038640:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038650:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038650:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038660:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038660:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038670:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038670:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038680:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | 00038680:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | ||
| 00038690:·312d·303 | 00038690:·312d·3037·290a·2020·2020·2020·2020·2020··1-07).·········· | ||
| 000386a0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 000386a0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 000386b0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 000386b0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 000386c0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 000386c0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 000386d0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 000386d0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 000386e0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 000386e0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 000386f0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 000386f0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00038700:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00038700:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15262, 236 lines modified | Offset 15262, 236 lines modified | ||
| 0003b9d0:·7461·7267·6574·3d22·2369·646d·3739·3830··target="#idm7980 | 0003b9d0:·7461·7267·6574·3d22·2369·646d·3739·3830··target="#idm7980 | ||
| 0003b9e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b9e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b9f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b9f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ba00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ba00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ba10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ba10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ba20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ba20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ba30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ba30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ba40:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003ba50:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ba60:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ba70:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ba80:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | |||
| 0003ba90:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003baa0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ba40:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003ba50:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ba60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ba70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ba80:·7365·2220·6964·3d22·6964·6d37·3938·3022··se"·id="idm7980" | |||
| 0003ba90:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003baa0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bab0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ba | 0003bab0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003bad0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ba | 0003bac0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003bad0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003bae0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003baf0:· | 0003baf0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003bb00:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003bb10:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bb20:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003bb30:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003bb00:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003bb10:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bb20:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003bb30:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003bb40:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003bb50:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003bb60:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003bb70:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003bb80:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003bb90:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003bba0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003bbb0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003bbc0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003bbd0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003bbe0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003bbf0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003bc00:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003bc10:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003bc20:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003bc30:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003bc40:·2043·4345·2d38·3038·3434·2d34·0a20·202d···CCE-80844-4.··- | |||
| 0003bc50:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003bc60:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003bc70:·4c2d·3038·2d30·3130·3335·390a·2020·2d20··L-08-010359.··-· | |||
| 0003bc80:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003bc90:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003bca0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003bcb0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003bcc0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003bcd0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003bce0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003bcf0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003bd00:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003bd10:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003bd20:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003bd30:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003bd40:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003bd50:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003bd60:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003bd70:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003bd80:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003bd90:·646d·3739·3831·2220·7461·6269·6e64·6578··dm7981"·tabindex | |||
| 0003bda0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bdb0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bdc0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bdd0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bde0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003bdf0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003be00:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003be10:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003be20:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003be30:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003be40:·3739·3831·223e·3c74·6162·6c65·2063·6c61··7981"><table·cla | |||
| 0003be50:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003be60:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003be70:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003be80:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003be90:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003bea0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003beb0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003bec0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003bed0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bee0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003bef0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bf00:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003bf10:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b | 0003bb40:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003bb50:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003bb60:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003bb70:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003bb80:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003bb90:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b | 0003bba0:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | ||
| 0003bbb0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003bbc0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003bbd0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003bbe0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003bf50:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003bf60:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| Max diff block lines reached; 10895772/10928118 bytes (99.70%) of diff not shown. | |||
| Offset 52, 15 lines modified | Offset 52, 15 lines modified | ||
| 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 117, 54 lines modified | Offset 117, 26 lines modified | ||
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ·············_\x8c_\x8i_\x8s············5.3.1 | 121 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | -·name:·Ensure·aide·is·installed | ||
| 130 | ··package: | ||
| 131 | ····name:·aide | ||
| 132 | ····state:·present | ||
| 133 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 134 | ··tags: | ||
| 135 | ··-·CCE-80844-4 | ||
| 136 | ··-·CJIS-5.10.1.3 | ||
| 137 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 138 | ··-·NIST-800-53-CM-6(a) | ||
| 139 | ··-·PCI-DSS-Req-11.5 | ||
| 140 | ··-·PCI-DSSv4-11.5.2 | ||
| 141 | ··-·enable_strategy | ||
| 142 | ··-·low_complexity | ||
| 143 | ··-·low_disruption | ||
| 144 | ··-·medium_severity | ||
| 145 | ··-·no_reboot_needed | ||
| 146 | ··-·package_aide_installed | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 152 | include·install_aide | 129 | include·install_aide |
| 153 | class·install_aide·{ | 130 | class·install_aide·{ |
| 154 | ··package·{·'aide': | 131 | ··package·{·'aide': |
| 155 | ····ensure·=>·'installed', | 132 | ····ensure·=>·'installed', |
| 156 | ··} | 133 | ··} |
| 157 | } | 134 | } |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | 140 | #·Remediation·is·applicable·only·in·certain·platforms |
| 168 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 141 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 179, 21 lines modified | Offset 151, 49 lines modified | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | package·install·aide | 156 | package·install·aide |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | package·--add=aide | 166 | package·--add=aide |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | -·name:·Ensure·aide·is·installed | ||
| 173 | ··package: | ||
| 174 | ····name:·aide | ||
| 175 | ····state:·present | ||
| 176 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 177 | ··tags: | ||
| 178 | ··-·CCE-80844-4 | ||
| 179 | ··-·CJIS-5.10.1.3 | ||
| 180 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 181 | ··-·NIST-800-53-CM-6(a) | ||
| 182 | ··-·PCI-DSS-Req-11.5 | ||
| 183 | ··-·PCI-DSSv4-11.5.2 | ||
| 184 | ··-·enable_strategy | ||
| 185 | ··-·low_complexity | ||
| 186 | ··-·low_disruption | ||
| 187 | ··-·medium_severity | ||
| 188 | ··-·no_reboot_needed | ||
| 189 | ··-·package_aide_installed | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/sbin/aide·--init | 192 | $·sudo·/usr/sbin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 196 | To·initiate·a·manual·check,·run·the·following·command: | 195 | To·initiate·a·manual·check,·run·the·following·command: |
| 197 | $·sudo·/usr/sbin/aide·--check | 196 | $·sudo·/usr/sbin/aide·--check |
| Offset 213, 14 lines modified | Offset 213, 28 lines modified | ||
| 213 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 213 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 214 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 214 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 216 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 216 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 217 | ·············_\x8c_\x8i_\x8s············5.3.1 | 217 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 218 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 218 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| Max diff block lines reached; 1309407/1314928 bytes (99.58%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000386a0:·3234·2d31·312d·303 | 000386a0:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15253, 237 lines modified | Offset 15253, 237 lines modified | ||
| 0003b940:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b940:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b950:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | 0003b950:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | ||
| 0003b960:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b960:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b970:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b970:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b980:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b980:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b990:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b990:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b9a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b9a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b9b0:·6d65·6469·6174·696f·6e20· | 0003b9b0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | ||
| 0003b9c0:· | 0003b9c0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b9d0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b9e0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b9f0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ba00:·3739·3830·223e·3c74·6162·6c65·2063·6c61··7980"><table·cla | |||
| 0003ba10:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b9d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b9e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b9f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ba00:·6d37·3938·3022·3e3c·7461·626c·6520·636c··m7980"><table·cl | |||
| 0003ba10:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ba20:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ba | 0003ba20:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003ba30:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003ba40:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003ba50:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003ba60:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ba70:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003ba80:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003ba40:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ba50:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003ba60:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ba70:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ba80:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003ba90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003baa0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bab0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003bac0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bad0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003ba | 0003ba90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003baa0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003baf0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003bb00:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003bb10:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003bb20:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003bb30:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003bb40:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bb50:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003bb60:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003bb70:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003bb80:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003bb90:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003bba0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003bbb0:·733a·0a20·202d·2043·4345·2d38·3038·3434··s:.··-·CCE-80844 | |||
| 0003bbc0:·2d34·0a20·202d·2043·4a49·532d·352e·3130··-4.··-·CJIS-5.10 | |||
| 0003bbd0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003bbe0:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 0003bbf0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003bc00:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003bc10:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003bc20:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003bc30:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003bc40:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003bc50:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003bc60:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003bc70:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003bc80:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003bc90:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003bca0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003bcb0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003bcc0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bcd0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bce0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bcf0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003bd00:·6574·3d22·2369·646d·3739·3831·2220·7461··et="#idm7981"·ta | |||
| 0003bd10:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bd20:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bd30:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bd40:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003bd50:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bd60:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003bd70:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003bd80:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bd90:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bda0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bdb0:·643d·2269·646d·3739·3831·223e·3c74·6162··d="idm7981"><tab | |||
| 0003bdc0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003bdd0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003bde0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003bdf0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003be00:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003be10:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003be20:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003be30:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003be40:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003be50:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003be60:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003be70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003be80:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b | 0003bab0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003bac0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003bad0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003bae0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003baf0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003bb00:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003bb10:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003bb20:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003bb30:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003bb40:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003bb50:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003bea0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003beb0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003bec0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| Max diff block lines reached; 10595718/10628202 bytes (99.69%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 116, 54 lines modified | Offset 116, 26 lines modified | ||
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ·············_\x8c_\x8i_\x8s············5.3.1 | 120 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | -·name:·Ensure·aide·is·installed | ||
| 129 | ··package: | ||
| 130 | ····name:·aide | ||
| 131 | ····state:·present | ||
| 132 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 133 | ··tags: | ||
| 134 | ··-·CCE-80844-4 | ||
| 135 | ··-·CJIS-5.10.1.3 | ||
| 136 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 137 | ··-·NIST-800-53-CM-6(a) | ||
| 138 | ··-·PCI-DSS-Req-11.5 | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | ||
| 140 | ··-·enable_strategy | ||
| 141 | ··-·low_complexity | ||
| 142 | ··-·low_disruption | ||
| 143 | ··-·medium_severity | ||
| 144 | ··-·no_reboot_needed | ||
| 145 | ··-·package_aide_installed | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | include·install_aide | 128 | include·install_aide |
| 152 | class·install_aide·{ | 129 | class·install_aide·{ |
| 153 | ··package·{·'aide': | 130 | ··package·{·'aide': |
| 154 | ····ensure·=>·'installed', | 131 | ····ensure·=>·'installed', |
| 155 | ··} | 132 | ··} |
| 156 | } | 133 | } |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | #·Remediation·is·applicable·only·in·certain·platforms | 139 | #·Remediation·is·applicable·only·in·certain·platforms |
| 167 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 140 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 178, 21 lines modified | Offset 150, 49 lines modified | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 183 | package·install·aide | 155 | package·install·aide |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | package·--add=aide | 165 | package·--add=aide |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | -·name:·Ensure·aide·is·installed | ||
| 172 | ··package: | ||
| 173 | ····name:·aide | ||
| 174 | ····state:·present | ||
| 175 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 176 | ··tags: | ||
| 177 | ··-·CCE-80844-4 | ||
| 178 | ··-·CJIS-5.10.1.3 | ||
| 179 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 180 | ··-·NIST-800-53-CM-6(a) | ||
| 181 | ··-·PCI-DSS-Req-11.5 | ||
| 182 | ··-·PCI-DSSv4-11.5.2 | ||
| 183 | ··-·enable_strategy | ||
| 184 | ··-·low_complexity | ||
| 185 | ··-·low_disruption | ||
| 186 | ··-·medium_severity | ||
| 187 | ··-·no_reboot_needed | ||
| 188 | ··-·package_aide_installed | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 190 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 191 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 195 | To·initiate·a·manual·check,·run·the·following·command: | 194 | To·initiate·a·manual·check,·run·the·following·command: |
| 196 | $·sudo·/usr/sbin/aide·--check | 195 | $·sudo·/usr/sbin/aide·--check |
| Offset 212, 14 lines modified | Offset 212, 28 lines modified | ||
| 212 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 212 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 215 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 215 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 216 | ·············_\x8c_\x8i_\x8s············5.3.1 | 216 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 217 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 217 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| Max diff block lines reached; 1272437/1277958 bytes (99.57%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000386a0:·3234·2d31·312d·303 | 000386a0:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15285, 236 lines modified | Offset 15285, 236 lines modified | ||
| 0003bb40:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | 0003bb40:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | ||
| 0003bb50:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bb50:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bb60:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bb60:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003bb70:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003bb70:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003bb80:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003bb80:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003bb90:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003bb90:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003bba0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003bba0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003bbb0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003bbc0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bbd0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bbe0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bbf0:·2220·6964·3d22·6964·6d37·3938·3022·3e3c··"·id="idm7980">< | |||
| 0003bc00:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bc10:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bbb0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003bbc0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bbd0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bbe0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bbf0:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | |||
| 0003bc00:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bc10:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bc20:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bc | 0003bc20:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003bc30:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bc40:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bc40:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003bc50:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003bc60:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bc70:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003bc80:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bc90:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003bca0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003bcb0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003bcc0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003bcd0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003bce0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003bcf0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003bd00:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003bd10:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003bd20:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003bd30:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003bd40:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003bd50:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003bd60:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003bd70:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003bd80:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003bd90:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003bda0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003bdb0:·4343·452d·3830·3834·342d·340a·2020·2d20··CCE-80844-4.··-· | |||
| 0003bdc0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003bdd0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003bde0:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003bdf0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003be00:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003be10:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003be20:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003be30:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003be40:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003be50:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003be60:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003be70:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003be80:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003be90:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003bea0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003beb0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003bec0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bed0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003bee0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003bef0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003bf00:·6d37·3938·3122·2074·6162·696e·6465·783d··m7981"·tabindex= | |||
| 0003bf10:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bf20:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bf30:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bf40:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003bf50:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003bf60:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003bf70:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003bf80:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bf90:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bfa0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003bfb0:·3938·3122·3e3c·7461·626c·6520·636c·6173··981"><table·clas | |||
| 0003bfc0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bfd0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bfe0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bff0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c000:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c010:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c020:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003c030:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003c040:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c050:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c060:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c070:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c080:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003c090:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003c0a0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003c0b0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003c0c0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003c0d0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003c0e0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003c0f0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003c100:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003c110:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c120:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003c130:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003c140:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003c150:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003c160:·3d22·2369·646d·3739·3832·2220·7461·6269··="#idm7982"·tabi | |||
| 0003c170:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003c180:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003c190:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| Max diff block lines reached; 25329176/25361522 bytes (99.87%) of diff not shown. | |||
| Offset 14469, 15 lines modified | Offset 14469, 15 lines modified | ||
| 00038840:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038840:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038850:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038850:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038860:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038860:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038870:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038870:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038880:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038880:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038890:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038890:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 000388a0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 000388a0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 000388b0:·6620·3230·3234·2d31·312d·303 | 000388b0:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 000388c0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000388c0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000388d0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000388d0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000388e0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000388e0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000388f0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000388f0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038900:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038900:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038910:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038910:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038920:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038920:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15284, 236 lines modified | Offset 15284, 236 lines modified | ||
| 0003bb30:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | 0003bb30:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | ||
| 0003bb40:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 0003bb40:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 0003bb50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003bb50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003bb60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003bb60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003bb70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003bb70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bb80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003bb80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bb90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003bb90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bba0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003bbb0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003bbc0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003bbd0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003bbe0:·7365·2220·6964·3d22·6964·6d37·3938·3022··se"·id="idm7980" | |||
| 0003bbf0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003bc00:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bba0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003bbb0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bbc0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bbd0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bbe0:·7073·6522·2069·643d·2269·646d·3739·3830··pse"·id="idm7980 | |||
| 0003bbf0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bc00:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bc10:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bc | 0003bc10:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003bc20:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003bc30:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003bc40:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003bc50:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bc60:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003bc70:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bc80:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003bc90:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003bc30:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bc40:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003bc50:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bc60:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003bc70:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bc80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003bc90:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003bca0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003bcb0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003bcc0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003bcd0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003bce0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003bcf0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003bd00:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003bd10:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003bd20:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003bd30:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003bd40:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003bd50:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003bd60:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003bd70:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003bd80:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003bd90:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003bda0:·2d20·4343·452d·3830·3834·342d·340a·2020··-·CCE-80844-4.·· | |||
| 0003bdb0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003bdc0:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003bdd0:·454c·2d30·382d·3031·3033·3539·0a20·202d··EL-08-010359.··- | |||
| 0003bde0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003bdf0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003be00:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003be10:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003be20:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003be30:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003be40:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003be50:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003be60:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003be70:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003be80:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003be90:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003bea0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003beb0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bec0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bed0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bee0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bef0:·6964·6d37·3938·3122·2074·6162·696e·6465··idm7981"·tabinde | |||
| 0003bf00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bf10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bf20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bf30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bf40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bf50:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003bf60:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003bf70:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bf80:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003bf90:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bfa0:·6d37·3938·3122·3e3c·7461·626c·6520·636c··m7981"><table·cl | |||
| 0003bfb0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003bfc0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003bfd0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003bfe0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003bff0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003c000:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c010:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003c020:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003c030:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c040:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003c050:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003c060:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003c070:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003 | 0003bca0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003bcb0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003bcc0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003bcd0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003bce0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003bcf0:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003bd00:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003bd10:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003bd20:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003bd30:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003bd40:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| Max diff block lines reached; 9222662/9255008 bytes (99.65%) of diff not shown. | |||
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 61 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 62 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 63 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 64 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 64 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:8 | 65 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 54 lines modified | Offset 122, 26 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ·············_\x8c_\x8i_\x8s············5.3.1 | 126 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | -·name:·Ensure·aide·is·installed | ||
| 135 | ··package: | ||
| 136 | ····name:·aide | ||
| 137 | ····state:·present | ||
| 138 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 139 | ··tags: | ||
| 140 | ··-·CCE-80844-4 | ||
| 141 | ··-·CJIS-5.10.1.3 | ||
| 142 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 143 | ··-·NIST-800-53-CM-6(a) | ||
| 144 | ··-·PCI-DSS-Req-11.5 | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | ||
| 146 | ··-·enable_strategy | ||
| 147 | ··-·low_complexity | ||
| 148 | ··-·low_disruption | ||
| 149 | ··-·medium_severity | ||
| 150 | ··-·no_reboot_needed | ||
| 151 | ··-·package_aide_installed | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | include·install_aide | 134 | include·install_aide |
| 158 | class·install_aide·{ | 135 | class·install_aide·{ |
| 159 | ··package·{·'aide': | 136 | ··package·{·'aide': |
| 160 | ····ensure·=>·'installed', | 137 | ····ensure·=>·'installed', |
| 161 | ··} | 138 | ··} |
| 162 | } | 139 | } |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 145 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 184, 21 lines modified | Offset 156, 49 lines modified | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | package·install·aide | 161 | package·install·aide |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 195 | package·--add=aide | 171 | package·--add=aide |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | -·name:·Ensure·aide·is·installed | ||
| 178 | ··package: | ||
| 179 | ····name:·aide | ||
| 180 | ····state:·present | ||
| 181 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 182 | ··tags: | ||
| 183 | ··-·CCE-80844-4 | ||
| 184 | ··-·CJIS-5.10.1.3 | ||
| 185 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 186 | ··-·NIST-800-53-CM-6(a) | ||
| 187 | ··-·PCI-DSS-Req-11.5 | ||
| 188 | ··-·PCI-DSSv4-11.5.2 | ||
| 189 | ··-·enable_strategy | ||
| 190 | ··-·low_complexity | ||
| 191 | ··-·low_disruption | ||
| 192 | ··-·medium_severity | ||
| 193 | ··-·no_reboot_needed | ||
| 194 | ··-·package_aide_installed | ||
| 196 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 195 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 197 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 196 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 198 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 197 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 199 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 198 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 215, 14 lines modified | Offset 215, 27 lines modified | ||
| 215 | ·············_\x8i_\x8s_\x8m······1446 | 215 | ·············_\x8i_\x8s_\x8m······1446 |
| 216 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 216 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 217 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 217 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 218 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 218 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 219 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 219 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 220 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 220 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| Max diff block lines reached; 1250112/1256064 bytes (99.53%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038630:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038640:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038640:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038650:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038650:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038660:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038660:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038670:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038670:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038680:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038680:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038690:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038690:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000386a0:·342d·3131·2d30·3 | 000386a0:·342d·3131·2d30·3729·0a20·2020·2020·2020··4-11-07).······· | ||
| 000386b0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000386b0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 000386c0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 000386c0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 000386d0:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 000386d0:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 000386e0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 000386e0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 000386f0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 000386f0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038700:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038700:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038710:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038710:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15318, 305 lines modified | Offset 15318, 305 lines modified | ||
| 0003bd50:·7267·6574·3d22·2369·646d·3736·3336·2220··rget="#idm7636"· | 0003bd50:·7267·6574·3d22·2369·646d·3736·3336·2220··rget="#idm7636"· | ||
| 0003bd60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bd60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bd70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bd70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bd80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bd80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bd90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bd90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bda0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bda0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bdb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bdb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bdc0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003bdd0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bde0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bdf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003be00:·643d·2269·646d·3736·3336·223e·3c70·7265··d="idm7636"><pre | |||
| 0003be10:·3e3c·636f·6465·3e0a·2320·4669·6e64·2077··><code>.#·Find·w | |||
| 0003be20:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | |||
| 0003be30:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | |||
| 0003be40:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | |||
| 0003be50:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | |||
| 0003be60:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | |||
| 0003be70:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | |||
| 0003be80:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | |||
| 0003be90:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | |||
| 0003bea0:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | |||
| 0003beb0:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | |||
| 0003bec0:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | |||
| 0003bed0:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | |||
| 0003bee0:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | |||
| 0003bef0:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | |||
| 0003bf00:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | |||
| 0003bf10:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | |||
| 0003bf20:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | |||
| 0003bf30:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | |||
| 0003bf40:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | |||
| 0003bf50:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | |||
| 0003bf60:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | |||
| 0003bf70:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | |||
| 0003bf80:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | |||
| 0003bf90:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | |||
| 0003bfa0:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | |||
| 0003bfb0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003bfc0:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | |||
| 0003bfd0:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | |||
| 0003bfe0:·2020·2020·7975·6d20·7265·696e·7374·616c······yum·reinstal | |||
| 0003bff0:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | |||
| 0003c000:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | |||
| 0003c010:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | |||
| 0003c020:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003c030:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003c040:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003c050:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003c060:·7267·6574·3d22·2369·646d·3736·3337·2220··rget="#idm7637"· | |||
| 0003c070:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003c080:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003c090:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003c0a0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003c0b0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003c0c0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003 | 0003c0d0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003 | 0003c0e0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003 | 0003c0f0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003 | 0003c100:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003 | 0003c110:·2220·6964·3d22·6964·6d37·3633·3722·3e3c··"·id="idm7637">< | ||
| 0003 | 0003c120:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003 | 0003c130:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003 | 0003c140:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003 | 0003c150:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003 | 0003c160:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003 | 0003c170:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003 | 0003c180:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003 | 0003c190:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003 | 0003c1a0:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003 | 0003c1b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003 | 0003c1c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003 | 0003c1d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003 | 0003c1e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003 | 0003c1f0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003 | 0003c200:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003 | 0003c210:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003 | 0003c220:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003 | 0003c230:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| 0003 | 0003c240:·7265·696e·7374·616c·6c20·636f·6d6d·616e··reinstall·comman | ||
| 0003 | 0003c250:·6427·0a20·2073·6574·5f66·6163·743a·0a20··d'.··set_fact:.· | ||
| 0003 | 0003c260:·2020·2070·6163·6b61·6765·5f6d·616e·6167·····package_manag | ||
| 0003 | 0003c270:·6572·5f72·6569·6e73·7461·6c6c·5f63·6d64··er_reinstall_cmd | ||
| 0003 | 0003c280:·3a20·7975·6d20·7265·696e·7374·616c·6c20··:·yum·reinstall· | ||
| 0003 | 0003c290:·2d79·0a20·2077·6865·6e3a·2061·6e73·6962··-y.··when:·ansib | ||
| 0003 | 0003c2a0:·6c65·5f64·6973·7472·6962·7574·696f·6e20··le_distribution· | ||
| 0003 | 0003c2b0:·696e·205b·2022·4665·646f·7261·222c·2022··in·[·"Fedora",·" | ||
| 0003 | 0003c2c0:·5265·6448·6174·222c·2022·4365·6e74·4f53··RedHat",·"CentOS | ||
| 0003 | 0003c2d0:·222c·2022·4f72·6163·6c65·4c69·6e75·7822··",·"OracleLinux" | ||
| 0003 | 0003c2e0:·205d·0a20·2074·6167·733a·0a20·202d·2043···].··tags:.··-·C | ||
| 0003 | 0003c2f0:·4345·2d38·3038·3537·2d36·0a20·202d·2043··CE-80857-6.··-·C | ||
| 0003 | 0003c300:·4a49·532d·352e·3130·2e34·2e31·0a20·202d··JIS-5.10.4.1.··- | ||
| 0003c | 0003c310:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003c | 0003c320:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003c | 0003c330:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003c | 0003c340:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003c | 0003c350:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003c | 0003c360:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003c | 0003c370:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003c | 0003c380:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003c | 0003c390:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003c | 0003c3a0:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003c | 0003c3b0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c | 0003c3c0:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003c | 0003c3d0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003c | 0003c3e0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003c | 0003c3f0:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003c | 0003c400:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003c | 0003c410:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003c | 0003c420:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003c | 0003c430:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| Max diff block lines reached; 6595185/6637053 bytes (99.37%) of diff not shown. | |||
| Offset 52, 15 lines modified | Offset 52, 15 lines modified | ||
| 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 64 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 64 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 65 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 65 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 66 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 66 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 115, 14 lines modified | Offset 115, 27 lines modified | ||
| 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 124 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 125 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 126 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 127 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 128 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 129 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 127 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 135 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 128 | ··set_fact: | 136 | ··set_fact: |
| Offset 254, 27 lines modified | Offset 267, 14 lines modified | ||
| 254 | ··-·PCI-DSSv4-11.5.2 | 267 | ··-·PCI-DSSv4-11.5.2 |
| 255 | ··-·high_complexity | 268 | ··-·high_complexity |
| 256 | ··-·high_severity | 269 | ··-·high_severity |
| 257 | ··-·medium_disruption | 270 | ··-·medium_disruption |
| 258 | ··-·no_reboot_needed | 271 | ··-·no_reboot_needed |
| 259 | ··-·restrict_strategy | 272 | ··-·restrict_strategy |
| 260 | ··-·rpm_verify_hashes | 273 | ··-·rpm_verify_hashes |
| 261 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 262 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 263 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 264 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 265 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 266 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 267 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 268 | fi | ||
| 269 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 274 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 270 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 275 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 271 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 276 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 272 | run·the·following·command·to·determine·which·package·owns·it: | 277 | run·the·following·command·to·determine·which·package·owns·it: |
| 273 | $·rpm·-qf·FILENAME | 278 | $·rpm·-qf·FILENAME |
| 274 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 279 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 275 | $·sudo·rpm·--setugids·PACKAGENAME | 280 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 294, 14 lines modified | Offset 294, 40 lines modified | ||
| 294 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 294 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 295 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 295 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 296 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 296 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 297 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 297 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 298 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 299 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 299 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 300 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 300 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 306 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 307 | declare·-A·SETPERMS_RPM_DICT | ||
| 308 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 309 | #·is·expected·by·the·RPM·database | ||
| 310 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 311 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 312 | do | ||
| 313 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 314 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 315 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 316 | done | ||
| 317 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 318 | #·correct·values | ||
| 319 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 320 | do | ||
| 321 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 322 | done | ||
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 306 | -·name:·Read·list·of·files·with·incorrect·ownership | 328 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 307 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 329 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 379, 40 lines modified | Offset 405, 14 lines modified | ||
| 379 | ··-·PCI-DSSv4-11.5.2 | 405 | ··-·PCI-DSSv4-11.5.2 |
| 380 | ··-·high_complexity | 406 | ··-·high_complexity |
| 381 | ··-·high_severity | 407 | ··-·high_severity |
| 382 | ··-·medium_disruption | 408 | ··-·medium_disruption |
| 383 | ··-·no_reboot_needed | 409 | ··-·no_reboot_needed |
| 384 | ··-·restrict_strategy | 410 | ··-·restrict_strategy |
| 385 | ··-·rpm_verify_ownership | 411 | ··-·rpm_verify_ownership |
| 386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 387 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 388 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 389 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 390 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 391 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 703161/710919 bytes (98.91%) of diff not shown. | |||
| Offset 14456, 15 lines modified | Offset 14456, 15 lines modified | ||
| 00038770:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038770:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038780:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038780:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038790:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038790:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 000387a0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 000387a0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 000387b0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 000387b0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 000387c0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000387c0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000387d0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | 000387d0:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 000387e0:·2d30·3 | 000387e0:·2d30·3729·0a20·2020·2020·2020·2020·2020··-07).··········· | ||
| 000387f0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 000387f0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038800:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038800:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038810:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038810:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038820:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038820:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038830:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038830:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038840:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038840:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038850:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038850:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15344, 306 lines modified | Offset 15344, 306 lines modified | ||
| 0003bef0:·7461·7267·6574·3d22·2369·646d·3736·3336··target="#idm7636 | 0003bef0:·7461·7267·6574·3d22·2369·646d·3736·3336··target="#idm7636 | ||
| 0003bf00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003bf00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003bf10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003bf10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003bf20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003bf20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003bf30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003bf30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003bf40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003bf40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003bf50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003bf50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003bf60:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003bf70:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bf80:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bf90:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bfa0:·2069·643d·2269·646d·3736·3336·223e·3c70···id="idm7636"><p | |||
| 0003bfb0:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003bfc0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003bfd0:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003bfe0:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003bff0:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003c000:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003c010:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003c020:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003c030:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003c040:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003c050:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003c060:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003c070:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003c080:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003c090:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003c0a0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003c0b0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003c0c0:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003c0d0:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003c0e0:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003c0f0:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003c100:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003c110:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003c120:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003c130:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003c140:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003c150:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003c160:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003c170:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003c180:·200a·2020·2020·7975·6d20·7265·696e·7374···.····yum·reinst | |||
| 0003c190:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003c1a0:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003c1b0:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003c1c0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c1d0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c1e0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c1f0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c200:·7461·7267·6574·3d22·2369·646d·3736·3337··target="#idm7637 | |||
| 0003c210:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c220:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c230:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c240:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c250:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c260:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003 | 0003c270:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003 | 0003c280:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003 | 0003c290:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003 | 0003c2a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003 | 0003c2b0:·7365·2220·6964·3d22·6964·6d37·3633·3722··se"·id="idm7637" | ||
| 0003 | 0003c2c0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003 | 0003c2d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003 | 0003c2e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003 | 0003c2f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003 | 0003c300:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003c | 0003c310:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003c | 0003c320:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003c | 0003c330:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003c | 0003c340:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003c | 0003c350:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c | 0003c360:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003c | 0003c370:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003c | 0003c380:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003c | 0003c390:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003c | 0003c3a0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003c | 0003c3b0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003c | 0003c3c0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003c | 0003c3d0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003c | 0003c3e0:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003c | 0003c3f0:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003c | 0003c400:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003c | 0003c410:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003c | 0003c420:·6d64·3a20·7975·6d20·7265·696e·7374·616c··md:·yum·reinstal | ||
| 0003c | 0003c430:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | ||
| 0003c | 0003c440:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003c | 0003c450:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003c | 0003c460:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003c | 0003c470:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003c | 0003c480:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003c | 0003c490:·2043·4345·2d38·3038·3537·2d36·0a20·202d···CCE-80857-6.··- | ||
| 0003c | 0003c4a0:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003c | 0003c4b0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003c | 0003c4c0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003c | 0003c4d0:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003c | 0003c4e0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003c | 0003c4f0:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003c | 0003c500:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003c | 0003c510:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c | 0003c520:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003c | 0003c530:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003c | 0003c540:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003c | 0003c550:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c | 0003c560:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003c | 0003c570:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003c | 0003c580:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003c | 0003c590:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003c | 0003c5a0:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003c | 0003c5b0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003c | 0003c5c0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003c | 0003c5d0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| Max diff block lines reached; 17326186/17368192 bytes (99.76%) of diff not shown. | |||
| Offset 57, 15 lines modified | Offset 57, 15 lines modified | ||
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:8 | 61 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 62 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 62 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 63 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 63 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 64 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 64 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 65 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 66 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 66 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 67 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 67 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 68 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 68 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 69 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 69 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 70 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 70 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 71 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 71 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 121, 14 lines modified | Offset 121, 27 lines modified | ||
| 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 130 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 131 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 132 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 133 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 134 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 135 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 141 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 134 | ··set_fact: | 142 | ··set_fact: |
| Offset 260, 27 lines modified | Offset 273, 14 lines modified | ||
| 260 | ··-·PCI-DSSv4-11.5.2 | 273 | ··-·PCI-DSSv4-11.5.2 |
| 261 | ··-·high_complexity | 274 | ··-·high_complexity |
| 262 | ··-·high_severity | 275 | ··-·high_severity |
| 263 | ··-·medium_disruption | 276 | ··-·medium_disruption |
| 264 | ··-·no_reboot_needed | 277 | ··-·no_reboot_needed |
| 265 | ··-·restrict_strategy | 278 | ··-·restrict_strategy |
| 266 | ··-·rpm_verify_hashes | 279 | ··-·rpm_verify_hashes |
| 267 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 268 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 269 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 270 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 271 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 272 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 273 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 274 | fi | ||
| 275 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 280 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 276 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 281 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 277 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 282 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 278 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 283 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 279 | $·rpm·-qf·FILENAME | 284 | $·rpm·-qf·FILENAME |
| 280 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 285 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 302, 14 lines modified | Offset 302, 44 lines modified | ||
| 302 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 302 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 303 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 303 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 304 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 304 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 305 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 305 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 306 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 306 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 307 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 307 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 308 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 308 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 314 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 315 | declare·-A·SETPERMS_RPM_DICT | ||
| 316 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 317 | #·is·expected·by·the·RPM·database | ||
| 318 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 319 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 320 | do | ||
| 321 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 322 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 323 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 324 | ········do | ||
| 325 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 326 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 327 | ········done | ||
| 328 | done | ||
| 329 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 330 | #·correct·values | ||
| 331 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 332 | do | ||
| 333 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 334 | done | ||
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 336 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 337 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 338 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 339 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 314 | -·name:·Read·list·of·files·with·incorrect·permissions | 340 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 315 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 341 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 390, 44 lines modified | Offset 420, 14 lines modified | ||
| 390 | ··-·PCI-DSSv4-11.5.2 | 420 | ··-·PCI-DSSv4-11.5.2 |
| 391 | ··-·high_complexity | 421 | ··-·high_complexity |
| 392 | ··-·high_severity | 422 | ··-·high_severity |
| 393 | ··-·medium_disruption | 423 | ··-·medium_disruption |
| 394 | ··-·no_reboot_needed | 424 | ··-·no_reboot_needed |
| 395 | ··-·restrict_strategy | 425 | ··-·restrict_strategy |
| 396 | ··-·rpm_verify_permissions | 426 | ··-·rpm_verify_permissions |
| 397 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 398 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 399 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1375288/1383430 bytes (99.41%) of diff not shown. | |||
| Offset 14449, 15 lines modified | Offset 14449, 15 lines modified | ||
| 00038700:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038700:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038710:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038710:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038720:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038720:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038730:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038730:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038740:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038740:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038760:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | 00038760:·2020·2861·7320·6f66·2032·3032·342d·3131····(as·of·2024-11 | ||
| 00038770:·2d30·3 | 00038770:·2d30·3729·0a20·2020·2020·2020·2020·2020··-07).··········· | ||
| 00038780:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038780:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038790:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038790:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 000387a0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 000387a0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 000387b0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 000387b0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 000387c0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 000387c0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 000387d0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 000387d0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 000387e0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 000387e0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15352, 306 lines modified | Offset 15352, 306 lines modified | ||
| 0003bf70:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003bf70:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003bf80:·3633·3622·2074·6162·696e·6465·783d·2230··636"·tabindex="0 | 0003bf80:·3633·3622·2074·6162·696e·6465·783d·2230··636"·tabindex="0 | ||
| 0003bf90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003bf90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003bfa0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003bfa0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003bfb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003bfb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003bfc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003bfc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003bfd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003bfd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003bfe0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003bff0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003c000:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c010:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c020:·7365·2220·6964·3d22·6964·6d37·3633·3622··se"·id="idm7636" | |||
| 0003c030:·3e3c·7072·653e·3c63·6f64·653e·0a23·2046··><pre><code>.#·F | |||
| 0003c040:·696e·6420·7768·6963·6820·6669·6c65·7320··ind·which·files· | |||
| 0003c050:·6861·7665·2069·6e63·6f72·7265·6374·2068··have·incorrect·h | |||
| 0003c060:·6173·6820·286e·6f74·2069·6e20·2f65·7463··ash·(not·in·/etc | |||
| 0003c070:·2c20·6265·6361·7573·6520·6f66·2074·6865··,·because·of·the | |||
| 0003c080:·2073·7973·7465·6d20·7265·6c61·7465·6420···system·related· | |||
| 0003c090:·636f·6e66·6967·2066·696c·6573·2920·616e··config·files)·an | |||
| 0003c0a0:·6420·7468·656e·2067·6574·2066·696c·6573··d·then·get·files | |||
| 0003c0b0:·206e·616d·6573·0a66·696c·6573·5f77·6974···names.files_wit | |||
| 0003c0c0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003c0d0:·3d22·2428·7270·6d20·2d56·6120·2d2d·6e6f··="$(rpm·-Va·--no | |||
| 0003c0e0:·636f·6e66·6967·207c·2067·7265·7020·2d45··config·|·grep·-E | |||
| 0003c0f0:·2027·5e2e·2e35·2720·7c20·6177·6b20·277b···'^..5'·|·awk·'{ | |||
| 0003c100:·7072·696e·7420·244e·467d·2720·2922·0a0a··print·$NF}'·)".. | |||
| 0003c110:·6966·205b·202d·6e20·2224·6669·6c65·735f··if·[·-n·"$files_ | |||
| 0003c120:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003c130:·6173·6822·205d·3b20·7468·656e·0a20·2020··ash"·];·then.··· | |||
| 0003c140:·2023·2046·726f·6d20·6669·6c65·7320·6e61···#·From·files·na | |||
| 0003c150:·6d65·7320·6765·7420·7061·636b·6167·6520··mes·get·package· | |||
| 0003c160:·6e61·6d65·7320·616e·6420·6368·616e·6765··names·and·change | |||
| 0003c170:·206e·6577·6c69·6e65·2074·6f20·7370·6163···newline·to·spac | |||
| 0003c180:·652c·2062·6563·6175·7365·2072·706d·2077··e,·because·rpm·w | |||
| 0003c190:·7269·7465·7320·6561·6368·2070·6163·6b61··rites·each·packa | |||
| 0003c1a0:·6765·2074·6f20·6e65·7720·6c69·6e65·0a20··ge·to·new·line.· | |||
| 0003c1b0:·2020·2070·6163·6b61·6765·735f·746f·5f72·····packages_to_r | |||
| 0003c1c0:·6569·6e73·7461·6c6c·3d22·2428·7270·6d20··einstall="$(rpm· | |||
| 0003c1d0:·2d71·6620·2466·696c·6573·5f77·6974·685f··-qf·$files_with_ | |||
| 0003c1e0:·696e·636f·7272·6563·745f·6861·7368·207c··incorrect_hash·| | |||
| 0003c1f0:·2074·7220·275c·6e27·2027·2027·2922·0a0a···tr·'\n'·'·')".. | |||
| 0003c200:·2020·2020·0a20·2020·2079·756d·2072·6569······.····yum·rei | |||
| 0003c210:·6e73·7461·6c6c·202d·7920·2470·6163·6b61··nstall·-y·$packa | |||
| 0003c220:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | |||
| 0003c230:·0a20·2020·200a·6669·0a3c·2f63·6f64·653e··.····.fi.</code> | |||
| 0003c240:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c250:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c260:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c270:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c280:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003c290:·3633·3722·2074·6162·696e·6465·783d·2230··637"·tabindex="0 | |||
| 0003c2a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c2b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c2c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c2d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c2e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003 | 0003c2f0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003 | 0003c300:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003c | 0003c310:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003c | 0003c320:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003c | 0003c330:·6c61·7073·6522·2069·643d·2269·646d·3736··lapse"·id="idm76 | ||
| 0003c | 0003c340:·3337·223e·3c74·6162·6c65·2063·6c61·7373··37"><table·class | ||
| 0003c | 0003c350:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003c | 0003c360:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003c | 0003c370:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003c | 0003c380:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003c | 0003c390:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003c | 0003c3a0:·643e·6869·6768·3c2f·7464·3e3c·2f74·723e··d>high</td></tr> | ||
| 0003c | 0003c3b0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003c | 0003c3c0:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0003c | 0003c3d0:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003c | 0003c3e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003c | 0003c3f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003c | 0003c400:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003c | 0003c410:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003c | 0003c420:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003c | 0003c430:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003c | 0003c440:·653e·2d20·6e61·6d65·3a20·2753·6574·2066··e>-·name:·'Set·f | ||
| 0003c | 0003c450:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | ||
| 0003c | 0003c460:·6167·6572·2072·6569·6e73·7461·6c6c·2063··ager·reinstall·c | ||
| 0003c | 0003c470:·6f6d·6d61·6e64·270a·2020·7365·745f·6661··ommand'.··set_fa | ||
| 0003c | 0003c480:·6374·3a0a·2020·2020·7061·636b·6167·655f··ct:.····package_ | ||
| 0003c | 0003c490:·6d61·6e61·6765·725f·7265·696e·7374·616c··manager_reinstal | ||
| 0003c | 0003c4a0:·6c5f·636d·643a·2079·756d·2072·6569·6e73··l_cmd:·yum·reins | ||
| 0003c | 0003c4b0:·7461·6c6c·202d·790a·2020·7768·656e·3a20··tall·-y.··when:· | ||
| 0003c | 0003c4c0:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | ||
| 0003c | 0003c4d0:·7469·6f6e·2069·6e20·5b20·2246·6564·6f72··tion·in·[·"Fedor | ||
| 0003c | 0003c4e0:·6122·2c20·2252·6564·4861·7422·2c20·2243··a",·"RedHat",·"C | ||
| 0003c | 0003c4f0:·656e·744f·5322·2c20·224f·7261·636c·654c··entOS",·"OracleL | ||
| 0003c | 0003c500:·696e·7578·2220·5d0a·2020·7461·6773·3a0a··inux"·].··tags:. | ||
| 0003c | 0003c510:·2020·2d20·4343·452d·3830·3835·372d·360a····-·CCE-80857-6. | ||
| 0003c | 0003c520:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003c | 0003c530:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003c | 0003c540:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003c | 0003c550:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003c | 0003c560:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c | 0003c570:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003c | 0003c580:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003c | 0003c590:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c | 0003c5a0:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003c | 0003c5b0:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003c | 0003c5c0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003c | 0003c5d0:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003c | 0003c5e0:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003c | 0003c5f0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003c | 0003c600:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003c | 0003c610:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003c | 0003c620:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003c | 0003c630:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003c | 0003c640:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003c | 0003c650:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| Max diff block lines reached; 10092284/10134290 bytes (99.59%) of diff not shown. | |||
| Offset 55, 15 lines modified | Offset 55, 15 lines modified | ||
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 60 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 61 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 61 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 62 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 62 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 63 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 64 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 64 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 65 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 65 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 66 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 66 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 67 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 67 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 68 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 68 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 69 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 69 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 122, 14 lines modified | Offset 122, 27 lines modified | ||
| 122 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 122 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 123 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 123 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 124 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 124 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 125 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 125 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 131 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 132 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 133 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 134 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 135 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 136 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 134 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 142 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 135 | ··set_fact: | 143 | ··set_fact: |
| Offset 261, 27 lines modified | Offset 274, 14 lines modified | ||
| 261 | ··-·PCI-DSSv4-11.5.2 | 274 | ··-·PCI-DSSv4-11.5.2 |
| 262 | ··-·high_complexity | 275 | ··-·high_complexity |
| 263 | ··-·high_severity | 276 | ··-·high_severity |
| 264 | ··-·medium_disruption | 277 | ··-·medium_disruption |
| 265 | ··-·no_reboot_needed | 278 | ··-·no_reboot_needed |
| 266 | ··-·restrict_strategy | 279 | ··-·restrict_strategy |
| 267 | ··-·rpm_verify_hashes | 280 | ··-·rpm_verify_hashes |
| 268 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 269 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 270 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 271 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 272 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 273 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 274 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 275 | fi | ||
| 276 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 281 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 277 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 282 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 278 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 283 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 279 | run·the·following·command·to·determine·which·package·owns·it: | 284 | run·the·following·command·to·determine·which·package·owns·it: |
| 280 | $·rpm·-qf·FILENAME | 285 | $·rpm·-qf·FILENAME |
| 281 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 286 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 282 | $·sudo·rpm·--setugids·PACKAGENAME | 287 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 301, 14 lines modified | Offset 301, 40 lines modified | ||
| 301 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 301 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 302 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 302 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 303 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 303 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 304 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 304 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 305 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 305 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 306 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 306 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 307 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 307 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 313 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 314 | declare·-A·SETPERMS_RPM_DICT | ||
| 315 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 316 | #·is·expected·by·the·RPM·database | ||
| 317 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 318 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 319 | do | ||
| 320 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 321 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 322 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 323 | done | ||
| 324 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 325 | #·correct·values | ||
| 326 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 327 | do | ||
| 328 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 329 | done | ||
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 313 | -·name:·Read·list·of·files·with·incorrect·ownership | 335 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 314 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 336 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 386, 40 lines modified | Offset 412, 14 lines modified | ||
| 386 | ··-·PCI-DSSv4-11.5.2 | 412 | ··-·PCI-DSSv4-11.5.2 |
| 387 | ··-·high_complexity | 413 | ··-·high_complexity |
| 388 | ··-·high_severity | 414 | ··-·high_severity |
| 389 | ··-·medium_disruption | 415 | ··-·medium_disruption |
| 390 | ··-·no_reboot_needed | 416 | ··-·no_reboot_needed |
| 391 | ··-·restrict_strategy | 417 | ··-·restrict_strategy |
| 392 | ··-·rpm_verify_ownership | 418 | ··-·rpm_verify_ownership |
| 393 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 394 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 395 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 396 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 397 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 398 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1046009/1053767 bytes (99.26%) of diff not shown. | |||
| Offset 14442, 15 lines modified | Offset 14442, 15 lines modified | ||
| 00038690:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038690:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000386a0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000386a0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000386b0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000386b0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000386c0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000386c0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 000386d0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 000386d0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 000386e0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 000386e0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 000386f0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 000386f0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038700:·6173·206f·6620·3230·3234·2d31·312d·303 | 00038700:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00038710:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038710:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038720:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038720:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038730:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038730:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038740:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038740:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038750:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038750:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038760:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038760:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038770:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038770:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15257, 237 lines modified | Offset 15257, 237 lines modified | ||
| 0003b980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b990:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | 0003b990:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | ||
| 0003b9a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b9a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b9b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b9b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b9c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b9c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b9d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b9d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b9e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b9e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b9f0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003ba00:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ba10:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ba20:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ba30:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003ba40:·3938·3022·3e3c·7461·626c·6520·636c·6173··980"><table·clas | |||
| 0003ba50:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b9f0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003ba00:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003ba10:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ba20:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ba30:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ba40:·3739·3830·223e·3c74·6162·6c65·2063·6c61··7980"><table·cla | |||
| 0003ba50:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003ba60:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003ba | 0003ba60:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003ba70:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003ba80:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ba90:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003baa0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bab0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003bac0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003bad0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bae0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003ba80:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003ba90:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003baa0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003bab0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003bac0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003bad0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bae0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003baf0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bb00:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003bb10:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003bb20:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003bb30:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003bb40:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003bb50:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003bb60:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003bb70:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003bb80:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003bb90:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003bba0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003bbb0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003bbc0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003bbd0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003bbe0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003bbf0:·3a0a·2020·2d20·4343·452d·3830·3834·342d··:.··-·CCE-80844- | |||
| 0003bc00:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003bc10:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003bc20:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003bc30:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003bc40:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bc50:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bc60:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bc70:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bc80:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bc90:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bca0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bcb0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bcc0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bcd0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bce0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bcf0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bd00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bd10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bd20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bd30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bd40:·743d·2223·6964·6d37·3938·3122·2074·6162··t="#idm7981"·tab | |||
| 0003bd50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bd60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bd70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bd80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bd90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bda0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003bdb0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003bdc0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bdd0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bde0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bdf0:·3d22·6964·6d37·3938·3122·3e3c·7461·626c··="idm7981"><tabl | |||
| 0003be00:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003be10:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003be20:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003be30:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003be40:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003be50:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003be60:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003be70:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003be80:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003be90:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bea0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003beb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003bec0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b | 0003baf0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003bb00:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003bb10:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003bb20:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003bb30:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003bb40:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003bb50:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003bb60:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003bb70:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003bb80:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003bb90:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| Max diff block lines reached; 9223076/9255560 bytes (99.65%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 66 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 67 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 67 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 114, 54 lines modified | Offset 114, 26 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ·············_\x8c_\x8i_\x8s············5.3.1 | 118 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | -·name:·Ensure·aide·is·installed | ||
| 127 | ··package: | ||
| 128 | ····name:·aide | ||
| 129 | ····state:·present | ||
| 130 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 131 | ··tags: | ||
| 132 | ··-·CCE-80844-4 | ||
| 133 | ··-·CJIS-5.10.1.3 | ||
| 134 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 135 | ··-·NIST-800-53-CM-6(a) | ||
| 136 | ··-·PCI-DSS-Req-11.5 | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | ||
| 138 | ··-·enable_strategy | ||
| 139 | ··-·low_complexity | ||
| 140 | ··-·low_disruption | ||
| 141 | ··-·medium_severity | ||
| 142 | ··-·no_reboot_needed | ||
| 143 | ··-·package_aide_installed | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | include·install_aide | 126 | include·install_aide |
| 150 | class·install_aide·{ | 127 | class·install_aide·{ |
| 151 | ··package·{·'aide': | 128 | ··package·{·'aide': |
| 152 | ····ensure·=>·'installed', | 129 | ····ensure·=>·'installed', |
| 153 | ··} | 130 | ··} |
| 154 | } | 131 | } |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | 137 | #·Remediation·is·applicable·only·in·certain·platforms |
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 176, 21 lines modified | Offset 148, 49 lines modified | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 181 | package·install·aide | 153 | package·install·aide |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | package·--add=aide | 163 | package·--add=aide |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | -·name:·Ensure·aide·is·installed | ||
| 170 | ··package: | ||
| 171 | ····name:·aide | ||
| 172 | ····state:·present | ||
| 173 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 174 | ··tags: | ||
| 175 | ··-·CCE-80844-4 | ||
| 176 | ··-·CJIS-5.10.1.3 | ||
| 177 | ··-·DISA-STIG-RHEL-08-010359 | ||
| 178 | ··-·NIST-800-53-CM-6(a) | ||
| 179 | ··-·PCI-DSS-Req-11.5 | ||
| 180 | ··-·PCI-DSSv4-11.5.2 | ||
| 181 | ··-·enable_strategy | ||
| 182 | ··-·low_complexity | ||
| 183 | ··-·low_disruption | ||
| 184 | ··-·medium_severity | ||
| 185 | ··-·no_reboot_needed | ||
| 186 | ··-·package_aide_installed | ||
| 188 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 187 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 189 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 188 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 190 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 189 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 191 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 190 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 207, 14 lines modified | Offset 207, 27 lines modified | ||
| 207 | ·············_\x8i_\x8s_\x8m······1446 | 207 | ·············_\x8i_\x8s_\x8m······1446 |
| 208 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 208 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 209 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 209 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 210 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 210 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 211 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 211 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 212 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 212 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| Max diff block lines reached; 1250132/1256084 bytes (99.53%) of diff not shown. | |||
| Offset 14437, 15 lines modified | Offset 14437, 15 lines modified | ||
| 00038640:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038640:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038650:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038650:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038660:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038660:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038670:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038670:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038680:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038680:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038690:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038690:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 000386a0:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 000386a0:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 000386b0:·3032·342d·3131·2d30·3 | 000386b0:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 000386c0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 000386c0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000386d0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000386d0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000386e0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000386e0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000386f0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000386f0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00038700:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00038700:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038710:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038710:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038720:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038720:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15344, 306 lines modified | Offset 15344, 306 lines modified | ||
| 0003bef0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003bef0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003bf00:·6964·6d37·3633·3622·2074·6162·696e·6465··idm7636"·tabinde | 0003bf00:·6964·6d37·3633·3622·2074·6162·696e·6465··idm7636"·tabinde | ||
| 0003bf10:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003bf10:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003bf20:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003bf20:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003bf30:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003bf30:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003bf40:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003bf40:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003bf50:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003bf50:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003bf60:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003bf70:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003bf80:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bf90:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bfa0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003bfb0:·3633·3622·3e3c·7072·653e·3c63·6f64·653e··636"><pre><code> | |||
| 0003bfc0:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | |||
| 0003bfd0:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | |||
| 0003bfe0:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | |||
| 0003bff0:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | |||
| 0003c000:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | |||
| 0003c010:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | |||
| 0003c020:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | |||
| 0003c030:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | |||
| 0003c040:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003c050:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | |||
| 0003c060:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | |||
| 0003c070:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | |||
| 0003c080:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | |||
| 0003c090:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | |||
| 0003c0a0:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003c0b0:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | |||
| 0003c0c0:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | |||
| 0003c0d0:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | |||
| 0003c0e0:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | |||
| 0003c0f0:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | |||
| 0003c100:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | |||
| 0003c110:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | |||
| 0003c120:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | |||
| 0003c130:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | |||
| 0003c140:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | |||
| 0003c150:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | |||
| 0003c160:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003c170:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | |||
| 0003c180:·2922·0a0a·2020·2020·0a20·2020·2079·756d··)"..····.····yum | |||
| 0003c190:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | |||
| 0003c1a0:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | |||
| 0003c1b0:·7461·6c6c·0a20·2020·200a·6669·0a3c·2f63··tall.····.fi.</c | |||
| 0003c1c0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003c1d0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003c1e0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003c1f0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003c200:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003c210:·6964·6d37·3633·3722·2074·6162·696e·6465··idm7637"·tabinde | |||
| 0003c220:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003c230:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003c240:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003c250:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003c260:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003 | 0003c270:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003 | 0003c280:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003 | 0003c290:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003 | 0003c2a0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003 | 0003c2b0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003 | 0003c2c0:·646d·3736·3337·223e·3c74·6162·6c65·2063··dm7637"><table·c | ||
| 0003 | 0003c2d0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003 | 0003c2e0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003 | 0003c2f0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003 | 0003c300:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003c | 0003c310:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003c | 0003c320:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003c | 0003c330:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003c | 0003c340:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003c | 0003c350:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003c | 0003c360:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003c | 0003c370:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003c | 0003c380:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003c | 0003c390:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003c | 0003c3a0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003c | 0003c3b0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003c | 0003c3c0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·2753··<code>-·name:·'S | ||
| 0003c | 0003c3d0:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| 0003c | 0003c3e0:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | ||
| 0003c | 0003c3f0:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | ||
| 0003c | 0003c400:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | ||
| 0003c | 0003c410:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | ||
| 0003c | 0003c420:·7374·616c·6c5f·636d·643a·2079·756d·2072··stall_cmd:·yum·r | ||
| 0003c | 0003c430:·6569·6e73·7461·6c6c·202d·790a·2020·7768··einstall·-y.··wh | ||
| 0003c | 0003c440:·656e·3a20·616e·7369·626c·655f·6469·7374··en:·ansible_dist | ||
| 0003c | 0003c450:·7269·6275·7469·6f6e·2069·6e20·5b20·2246··ribution·in·[·"F | ||
| 0003c | 0003c460:·6564·6f72·6122·2c20·2252·6564·4861·7422··edora",·"RedHat" | ||
| 0003c | 0003c470:·2c20·2243·656e·744f·5322·2c20·224f·7261··,·"CentOS",·"Ora | ||
| 0003c | 0003c480:·636c·654c·696e·7578·2220·5d0a·2020·7461··cleLinux"·].··ta | ||
| 0003c | 0003c490:·6773·3a0a·2020·2d20·4343·452d·3830·3835··gs:.··-·CCE-8085 | ||
| 0003c | 0003c4a0:·372d·360a·2020·2d20·434a·4953·2d35·2e31··7-6.··-·CJIS-5.1 | ||
| 0003c | 0003c4b0:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003c | 0003c4c0:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003c | 0003c4d0:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003c | 0003c4e0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003c | 0003c4f0:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003c | 0003c500:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003c | 0003c510:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003c | 0003c520:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003c | 0003c530:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003c | 0003c540:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c | 0003c550:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003c | 0003c560:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003c | 0003c570:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003c | 0003c580:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003c | 0003c590:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003c | 0003c5a0:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003c | 0003c5b0:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003c | 0003c5c0:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003c | 0003c5d0:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| Max diff block lines reached; 17270257/17312263 bytes (99.76%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 121, 14 lines modified | Offset 121, 27 lines modified | ||
| 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 130 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 131 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 132 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 133 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 134 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 135 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 141 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 134 | ··set_fact: | 142 | ··set_fact: |
| Offset 260, 27 lines modified | Offset 273, 14 lines modified | ||
| 260 | ··-·PCI-DSSv4-11.5.2 | 273 | ··-·PCI-DSSv4-11.5.2 |
| 261 | ··-·high_complexity | 274 | ··-·high_complexity |
| 262 | ··-·high_severity | 275 | ··-·high_severity |
| 263 | ··-·medium_disruption | 276 | ··-·medium_disruption |
| 264 | ··-·no_reboot_needed | 277 | ··-·no_reboot_needed |
| 265 | ··-·restrict_strategy | 278 | ··-·restrict_strategy |
| 266 | ··-·rpm_verify_hashes | 279 | ··-·rpm_verify_hashes |
| 267 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 268 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 269 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 270 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 271 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 272 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 273 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 274 | fi | ||
| 275 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 280 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 276 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 281 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 277 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 282 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 278 | run·the·following·command·to·determine·which·package·owns·it: | 283 | run·the·following·command·to·determine·which·package·owns·it: |
| 279 | $·rpm·-qf·FILENAME | 284 | $·rpm·-qf·FILENAME |
| 280 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 285 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 281 | $·sudo·rpm·--setugids·PACKAGENAME | 286 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 300, 14 lines modified | Offset 300, 40 lines modified | ||
| 300 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 300 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 301 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 301 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 302 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 302 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 303 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 303 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 304 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 304 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 305 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 305 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 306 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 306 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 312 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 313 | declare·-A·SETPERMS_RPM_DICT | ||
| 314 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 315 | #·is·expected·by·the·RPM·database | ||
| 316 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 317 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 318 | do | ||
| 319 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 320 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 321 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 322 | done | ||
| 323 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 324 | #·correct·values | ||
| 325 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 326 | do | ||
| 327 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 328 | done | ||
| 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 312 | -·name:·Read·list·of·files·with·incorrect·ownership | 334 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 313 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 335 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 385, 40 lines modified | Offset 411, 14 lines modified | ||
| 385 | ··-·PCI-DSSv4-11.5.2 | 411 | ··-·PCI-DSSv4-11.5.2 |
| 386 | ··-·high_complexity | 412 | ··-·high_complexity |
| 387 | ··-·high_severity | 413 | ··-·high_severity |
| 388 | ··-·medium_disruption | 414 | ··-·medium_disruption |
| 389 | ··-·no_reboot_needed | 415 | ··-·no_reboot_needed |
| 390 | ··-·restrict_strategy | 416 | ··-·restrict_strategy |
| 391 | ··-·rpm_verify_ownership | 417 | ··-·rpm_verify_ownership |
| 392 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 393 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 394 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 395 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 396 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 397 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1665737/1673375 bytes (99.54%) of diff not shown. | |||
| Offset 14446, 15 lines modified | Offset 14446, 15 lines modified | ||
| 000386d0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000386d0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 000386e0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 000386e0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 000386f0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 000386f0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038700:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038700:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038710:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038710:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038720:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038720:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038730:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038730:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038740:·206f·6620·3230·3234·2d31·312d·303 | 00038740:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038760:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038760:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038770:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038770:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038780:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038780:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038790:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038790:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000387a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000387a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000387b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000387b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15284, 236 lines modified | Offset 15284, 236 lines modified | ||
| 0003bb30:·7267·6574·3d22·2369·646d·3739·3830·2220··rget="#idm7980"· | 0003bb30:·7267·6574·3d22·2369·646d·3739·3830·2220··rget="#idm7980"· | ||
| 0003bb40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bb40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bb50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bb50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bb60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bb60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bb70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bb70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bb80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bb80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bb90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bb90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bba0:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003bbb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bbc0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bbd0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bbe0:·2069·643d·2269·646d·3739·3830·223e·3c74···id="idm7980"><t | |||
| 0003bbf0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003bc00:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bba0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003bbb0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bbc0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bbd0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bbe0:·2220·6964·3d22·6964·6d37·3938·3022·3e3c··"·id="idm7980">< | |||
| 0003bbf0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bc00:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bc10:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bc | 0003bc10:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003bc20:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003bc30:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003bc40:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003bc30:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bc40:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bc50:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bc60:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bc70:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bc80:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003bc90:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003bca0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bcb0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003bcc0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003bcd0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003bce0:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003bcf0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003bd00:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003bd10:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003bd20:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003bd30:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003bd40:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003bd50:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003bd60:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003bd70:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003bd80:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003bd90:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003bda0:·4345·2d38·3038·3434·2d34·0a20·202d·2043··CE-80844-4.··-·C | |||
| 0003bdb0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003bdc0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003bdd0:·3038·2d30·3130·3335·390a·2020·2d20·4e49··08-010359.··-·NI | |||
| 0003bde0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003bdf0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003be00:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003be10:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003be20:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003be30:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003be40:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003be50:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003be60:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003be70:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003be80:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003be90:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003bea0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003beb0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bec0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bed0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bee0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bef0:·3739·3831·2220·7461·6269·6e64·6578·3d22··7981"·tabindex=" | |||
| 0003bf00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bf10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bf20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bf30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bf40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bf50:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003bf60:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003bf70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bf80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bf90:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003bfa0:·3831·223e·3c74·6162·6c65·2063·6c61·7373··81"><table·class | |||
| 0003bfb0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bfc0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bfd0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bfe0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bff0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c000:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c010:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003c020:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003c030:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c040:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003c050:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003c060:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003c070:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003 | 0003bc50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 0003bc60:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003bc70:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bc80:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003bc90:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003bca0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bcb0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003bcc0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003bcd0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003bce0:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003bcf0:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003 | 0003bd00:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | ||
| 0003bd10:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003bd20:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003bd30:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003bd40:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| Max diff block lines reached; 28963494/28995840 bytes (99.89%) of diff not shown. | |||
| Offset 14471, 15 lines modified | Offset 14471, 15 lines modified | ||
| 00038860:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038860:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038870:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038870:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038880:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038880:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038890:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038890:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000388a0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000388a0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000388b0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000388b0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000388c0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 000388c0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 000388d0:·303 | 000388d0:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 000388e0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 000388e0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000388f0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000388f0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00038900:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00038900:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038910:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038910:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038920:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038920:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038930:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038930:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038940:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038940:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15303, 236 lines modified | Offset 15303, 236 lines modified | ||
| 0003bc60:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | 0003bc60:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | ||
| 0003bc70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bc70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bc80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bc80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003bc90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003bc90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003bca0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003bca0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003bcb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003bcb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003bcc0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003bcc0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003bcd0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003bce0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bcf0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bd00:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bd10:·2220·6964·3d22·6964·6d37·3938·3022·3e3c··"·id="idm7980">< | |||
| 0003bd20:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bd30:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bcd0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003bce0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bcf0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bd00:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bd10:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | |||
| 0003bd20:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bd30:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bd40:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bd | 0003bd40:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003bd50:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bd60:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bd70:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bd60:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003bd70:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003bd80:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bd90:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003bda0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bdb0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003bdc0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003bdd0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003bde0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003bdf0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003be00:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003be10:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003be20:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003be30:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003be40:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003be50:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003be60:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003be70:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003be80:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003be90:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003bea0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003beb0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003bec0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003bed0:·4343·452d·3830·3834·342d·340a·2020·2d20··CCE-80844-4.··-· | |||
| 0003bee0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003bef0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003bf00:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003bf10:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003bf20:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003bf30:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003bf40:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003bf50:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003bf60:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003bf70:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003bf80:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003bf90:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003bfa0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003bfb0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003bfc0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003bfd0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003bfe0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bff0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c000:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c010:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c020:·6d37·3938·3122·2074·6162·696e·6465·783d··m7981"·tabindex= | |||
| 0003c030:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c040:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c050:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c060:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c070:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c080:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003c090:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003c0a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c0b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c0c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003c0d0:·3938·3122·3e3c·7461·626c·6520·636c·6173··981"><table·clas | |||
| 0003c0e0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c0f0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c100:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c110:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c120:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c130:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c140:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003c150:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003c160:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c170:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c180:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c190:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c1a0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003 | 0003bd80:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003 | 0003bd90:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003bda0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bdb0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003bdc0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003bdd0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bde0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003bdf0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003be00:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003be10:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003be20:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003 | 0003be30:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | ||
| 0003be40:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003be50:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003be60:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003be70:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| Max diff block lines reached; 28812650/28844996 bytes (99.89%) of diff not shown. | |||
| Offset 14317, 15 lines modified | Offset 14317, 15 lines modified | ||
| 00037ec0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ec0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ed0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ed0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ee0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ee0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037ef0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037ef0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f00:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f00:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f10:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f10:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f20:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | 00037f20:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037f30:·3 | 00037f30:·3729·0a20·2020·2020·2020·2020·2020·2020··7).············· | ||
| 00037f40:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f40:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f50:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f50:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f60:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f60:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f70:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f70:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f80:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f80:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037f90:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037f90:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fa0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fa0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15108, 237 lines modified | Offset 15108, 237 lines modified | ||
| 0003b030:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b030:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b040:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | 0003b040:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | ||
| 0003b050:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b050:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b060:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b060:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b070:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b070:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b080:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b080:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b090:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b090:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b0a0:·656d·6564·6961·7469·6f6e·20 | 0003b0a0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003b0b0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b0c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b0e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0f0:·6d38·3430·3622·3e3c·7461·626c·6520·636c··m8406"><table·cl | |||
| 0003b100:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b0b0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b0c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b0d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b0e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b0f0:·646d·3834·3036·223e·3c74·6162·6c65·2063··dm8406"><table·c | |||
| 0003b100:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b110:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b1 | 0003b110:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b120:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b130:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b140:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b150:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b160:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b170:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b130:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b140:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b150:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b160:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b170:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b180:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b190:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b1a0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b1b0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b1c0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b1 | 0003b180:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b190:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b1e0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b1f0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b200:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b210:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b220:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b230:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b240:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b250:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b260:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b270:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b280:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b290:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b2a0:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b2b0:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b2c0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b2d0:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b2e0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b2f0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b300:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b310:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b320:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b330:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b340:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b350:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b360:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b370:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b380:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b390:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b3a0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b3b0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b3c0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b3d0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b3e0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b3f0:·6765·743d·2223·6964·6d38·3430·3722·2074··get="#idm8407"·t | |||
| 0003b400:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b410:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b420:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b430:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b440:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b450:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b460:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b470:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b480:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b490:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4a0:·6964·3d22·6964·6d38·3430·3722·3e3c·7461··id="idm8407"><ta | |||
| 0003b4b0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b4c0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b4d0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b4e0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b4f0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b500:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b510:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b520:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b530:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b540:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b550:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b560:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b570:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b | 0003b1a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b1b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b1c0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b1d0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b1e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b1f0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b200:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b210:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b220:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b230:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b240:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b590:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b5a0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| Max diff block lines reached; 22159238/22191722 bytes (99.85%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037eb0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ec0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ec0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ed0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ed0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037ee0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037ee0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037ef0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037ef0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | 00037f10:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037f20:·3 | 00037f20:·3729·0a20·2020·2020·2020·2020·2020·2020··7).············· | ||
| 00037f30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037f80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037f80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037f90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037f90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15113, 237 lines modified | Offset 15113, 237 lines modified | ||
| 0003b080:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b080:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b090:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | 0003b090:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | ||
| 0003b0a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b0a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b0b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b0b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b0c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b0c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b0d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b0d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b0e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b0e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b0f0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b0f0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | ||
| 0003b100:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b110:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b120:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b100:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b110:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b120:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b130:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b140:·3d22·6964·6d38·3430·3622·3e3c·7461·626c··="idm8406"><tabl | |||
| 0003b150:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b160:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b170:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b180:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b190:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b1a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b1b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b1c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b1d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b1e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b1f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b200:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b210:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b220:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b230:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b240:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b250:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b260:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b270:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b280:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b290:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b2a0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b2b0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b2c0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b2d0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b2e0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b2f0:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b300:·3038·3433·2d34·0a20·202d·2043·4a49·532d··0843-4.··-·CJIS- | |||
| 0003b310:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b320:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003b330:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b340:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b350:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b360:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b370:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b380:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b390:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b3a0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b3b0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b3c0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b3d0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b3e0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b3f0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b400:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b410:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b420:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b | 0003b130:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b140:·2269·646d·3834·3036·223e·3c74·6162·6c65··"idm8406"><table | |||
| 0003b150:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b160:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b170:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b180:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b190:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b1a0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b1b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b1c0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b1d0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b1e0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b440:·7461·7267·6574·3d22·2369·646d·3834·3037··target="#idm8407 | |||
| 0003b450:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b460:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b470:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b480:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b490:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b4a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b4b0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b4c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b4f0:·6522·2069·643d·2269·646d·3834·3037·223e··e"·id="idm8407"> | |||
| 0003b500:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b510:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b520:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b530:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b540:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b550:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b560:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b570:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b580:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b590:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b5a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b5b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b5c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b | 0003b1f0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b5e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b | 0003b200:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b210:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b220:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b230:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b240:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b250:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b | 0003b260:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | ||
| 0003b270:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b280:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b290:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| Max diff block lines reached; 22585829/22618313 bytes (99.86%) of diff not shown. | |||
| Offset 14318, 15 lines modified | Offset 14318, 15 lines modified | ||
| 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | 00037f30:·2861·7320·6f66·2032·3032·342d·3131·2d30··(as·of·2024-11-0 | ||
| 00037f40:·3 | 00037f40:·3729·0a20·2020·2020·2020·2020·2020·2020··7).············· | ||
| 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15104, 236 lines modified | Offset 15104, 236 lines modified | ||
| 0003aff0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003aff0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b000:·3834·3036·2220·7461·6269·6e64·6578·3d22··8406"·tabindex=" | 0003b000:·3834·3036·2220·7461·6269·6e64·6578·3d22··8406"·tabindex=" | ||
| 0003b010:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b010:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b020:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b020:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b030:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b030:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b040:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b040:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b050:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b050:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b060:·6469·6174·696f·6e20· | 0003b060:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 0003b070:· | 0003b070:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b080:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b090:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b0a0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b0b0:·3036·223e·3c74·6162·6c65·2063·6c61·7373··06"><table·class | |||
| 0003b0c0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b080:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b090:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b0a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b0b0:·3430·3622·3e3c·7461·626c·6520·636c·6173··406"><table·clas | |||
| 0003b0c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b0d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b0 | 0003b0d0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b0e0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b0f0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b100:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b110:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b120:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b130:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b140:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b150:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b0f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b100:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b110:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b120:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b130:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b140:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b150:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b160:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b170:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b180:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b190:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b1a0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b1b0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b1c0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b1d0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b1e0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b1f0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b200:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b210:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b220:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b230:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b240:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b250:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b260:·0a20·202d·2043·4345·2d39·3038·3433·2d34··.··-·CCE-90843-4 | |||
| 0003b270:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b280:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b290:·2d52·4845·4c2d·3039·2d36·3531·3031·300a··-RHEL-09-651010. | |||
| 0003b2a0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b2b0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b2c0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b2d0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b2e0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b2f0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b300:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b310:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b320:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b330:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b340:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b350:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b360:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b370:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b380:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b390:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b3a0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b3b0:·3d22·2369·646d·3834·3037·2220·7461·6269··="#idm8407"·tabi | |||
| 0003b3c0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b3d0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b3e0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b3f0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b400:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b410:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b420:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b430:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b440:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b450:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b460:·2269·646d·3834·3037·223e·3c74·6162·6c65··"idm8407"><table | |||
| 0003b470:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b480:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b490:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b4a0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b4b0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b4c0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b4d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b4e0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b4f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b500:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b510:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b520:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b530:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b | 0003b160:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b170:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b180:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b190:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b1a0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b1b0:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b1c0:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b1d0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b1e0:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b1f0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b200:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b550:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b560:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| Max diff block lines reached; 9324254/9356600 bytes (99.65%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 119, 54 lines modified | Offset 119, 26 lines modified | ||
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 122 | ·············_\x8c_\x8i_\x8s············6.1.1 | 122 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | -·name:·Ensure·aide·is·installed | ||
| 132 | ··package: | ||
| 133 | ····name:·aide | ||
| 134 | ····state:·present | ||
| 135 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 136 | ··tags: | ||
| 137 | ··-·CCE-90843-4 | ||
| 138 | ··-·CJIS-5.10.1.3 | ||
| 139 | ··-·DISA-STIG-RHEL-09-651010 | ||
| 140 | ··-·NIST-800-53-CM-6(a) | ||
| 141 | ··-·PCI-DSS-Req-11.5 | ||
| 142 | ··-·PCI-DSSv4-11.5.2 | ||
| 143 | ··-·enable_strategy | ||
| 144 | ··-·low_complexity | ||
| 145 | ··-·low_disruption | ||
| 146 | ··-·medium_severity | ||
| 147 | ··-·no_reboot_needed | ||
| 148 | ··-·package_aide_installed | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 154 | include·install_aide | 131 | include·install_aide |
| 155 | class·install_aide·{ | 132 | class·install_aide·{ |
| 156 | ··package·{·'aide': | 133 | ··package·{·'aide': |
| 157 | ····ensure·=>·'installed', | 134 | ····ensure·=>·'installed', |
| 158 | ··} | 135 | ··} |
| 159 | } | 136 | } |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 169 | #·Remediation·is·applicable·only·in·certain·platforms | 142 | #·Remediation·is·applicable·only·in·certain·platforms |
| 170 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 143 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 181, 21 lines modified | Offset 153, 49 lines modified | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 186 | package·install·aide | 158 | package·install·aide |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | package·--add=aide | 168 | package·--add=aide |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | -·name:·Ensure·aide·is·installed | ||
| 175 | ··package: | ||
| 176 | ····name:·aide | ||
| 177 | ····state:·present | ||
| 178 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 179 | ··tags: | ||
| 180 | ··-·CCE-90843-4 | ||
| 181 | ··-·CJIS-5.10.1.3 | ||
| 182 | ··-·DISA-STIG-RHEL-09-651010 | ||
| 183 | ··-·NIST-800-53-CM-6(a) | ||
| 184 | ··-·PCI-DSS-Req-11.5 | ||
| 185 | ··-·PCI-DSSv4-11.5.2 | ||
| 186 | ··-·enable_strategy | ||
| 187 | ··-·low_complexity | ||
| 188 | ··-·low_disruption | ||
| 189 | ··-·medium_severity | ||
| 190 | ··-·no_reboot_needed | ||
| 191 | ··-·package_aide_installed | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 197 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 196 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 198 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 197 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 199 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 222, 14 lines modified | Offset 222, 28 lines modified | ||
| 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 225 | ·············_\x8c_\x8i_\x8s············6.1.1 | 225 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 227 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 227 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| Max diff block lines reached; 1042721/1048264 bytes (99.47%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037eb0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037ec0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037ec0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037ed0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037ed0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037ee0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037ee0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037ef0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037ef0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037f00:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037f00:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037f10:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037f10:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037f20:·6f66·2032·3032·342d·3131·2d30·3 | 00037f20:·6f66·2032·3032·342d·3131·2d30·3729·0a20··of·2024-11-07).· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037f30:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037f40:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037f40:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037f50:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037f50:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037f60:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037f60:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037f70:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037f70:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037f80:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037f80:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037f90:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037f90:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 14766, 218 lines modified | Offset 14766, 218 lines modified | ||
| 00039ad0:·6172·6765·743d·2223·6964·6d31·3237·3539··arget="#idm12759 | 00039ad0:·6172·6765·743d·2223·6964·6d31·3237·3539··arget="#idm12759 | ||
| 00039ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00039ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00039af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00039af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00039b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00039b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00039b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00039b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00039b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00039b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00039b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00039b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00039b40:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 00039b50:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00039b60:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00039b70:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00039b80:·6522·2069·643d·2269·646d·3132·3735·3922··e"·id="idm12759" | |||
| 00039b90:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039ba0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039b40:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00039b50:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00039b60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039b70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039b80:·7365·2220·6964·3d22·6964·6d31·3237·3539··se"·id="idm12759 | |||
| 00039b90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039ba0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039bb0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00039b | 00039bb0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 00039bd0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00039be0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00039bf0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039c00:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00039c10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039c20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00039c30:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00039c40:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00039c50:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00039c60:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039c70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039c80:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00039c90:·3a20·456e·7375·7265·2064·6e66·2d61·7574··:·Ensure·dnf-aut | |||
| 00039 | 00039bc0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 00039bd0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039be0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039bf0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039c00:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039c10:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039c20:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039c30:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039c40:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039c50:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039c60:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00039c70:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00039c80:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 00039c90:·2069·6e73·7461·6c6c·5f64·6e66·2d61·7574···install_dnf-aut | |||
| 00039ca0:·6f6d·6174·6963·0a0a·636c·6173·7320·696e··omatic..class·in | |||
| 00039cb0:·7374·616c·6c5f·646e·662d·6175·746f·6d61··stall_dnf-automa | |||
| 00039c | 00039cc0:·7469·6320·7b0a·2020·7061·636b·6167·6520··tic·{.··package· | ||
| 00039cc0:·2020·206e·616d·653a·2064·6e66·2d61·7574·····name:·dnf-aut | |||
| 00039cd0:·6f6d·6174·6963·0a20·2020·2073·7461·7465··omatic.····state | |||
| 00039ce0:·3a20·7072·6573·656e·740a·2020·7461·6773··:·present.··tags | |||
| 00039cf0:·3a0a·2020·2d20·4343·452d·3833·3435·342d··:.··-·CCE-83454- | |||
| 00039d00:·390a·2020·2d20·656e·6162·6c65·5f73·7472··9.··-·enable_str | |||
| 00039d10:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00039d20:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00039d30:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00039d40:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00039d50:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00039d60:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 00039d7 | 00039cd0:·7b20·2764·6e66·2d61·7574·6f6d·6174·6963··{·'dnf-automatic | ||
| 00039 | 00039ce0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | ||
| 00039cf0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 00039d00:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 00039d | 00039d10:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 00039d | 00039d20:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 00039d | 00039d30:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 00039d | 00039d40:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 00039d | 00039d50:·2d74·6172·6765·743d·2223·6964·6d31·3237··-target="#idm127 | ||
| 00039d | 00039d60:·3630·2220·7461·6269·6e64·6578·3d22·3022··60"·tabindex="0" | ||
| 00039d | 00039d70:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00039 | 00039d80:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00039 | 00039d90:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00039 | 00039da0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00039 | 00039db0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00039 | 00039dc0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | ||
| 00039 | 00039dd0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 00039 | 00039de0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 00039 | 00039df0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 00039e | 00039e00:·6522·2069·643d·2269·646d·3132·3736·3022··e"·id="idm12760" | ||
| 00039e | 00039e10:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 00039e | 00039e20:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 00039e | 00039e30:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 00039e | 00039e40:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 00039e | 00039e50:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 00039e | 00039e60:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 00039ef0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039f00:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00039f10:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00039f20:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039f30:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00039f40:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00039f50:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00039f60:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00039 | 00039e70:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 00039f80:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 00039f90:·6c75·6465·2069·6e73·7461·6c6c·5f64·6e66··lude·install_dnf | |||
| 00039fa0:·2d61·7574·6f6d·6174·6963·0a0a·636c·6173··-automatic..clas | |||
| 00039fb0:·7320·696e·7374·616c·6c5f·646e·662d·6175··s·install_dnf-au | |||
| 00039fc0:·746f·6d61·7469·6320·7b0a·2020·7061·636b··tomatic·{.··pack | |||
| 00039fd0:·6167·6520·7b20·2764·6e66·2d61·7574·6f6d··age·{·'dnf-autom | |||
| 00039fe0:·6174·6963·273a·0a20·2020·2065·6e73·7572··atic':.····ensur | |||
| 00039ff0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003 | 00039e80:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 00039e90:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039ea0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039eb0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| Max diff block lines reached; 3128701/3158563 bytes (99.05%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 58 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 58 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 59 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 59 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 83, 48 lines modified | Offset 83, 26 lines modified | ||
| 83 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 83 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 84 | ·············suitable·for·automatic,·regular·execution. | 84 | ·············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ···medium | 85 | Severity: ···medium |
| 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | Identifiers:·CCE-83454-9 | 87 | Identifiers:·CCE-83454-9 |
| 88 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 88 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 89 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 89 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 91 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 92 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 93 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 94 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 95 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 96 | ··package: | ||
| 97 | ····name:·dnf-automatic | ||
| 98 | ····state:·present | ||
| 99 | ··tags: | ||
| 100 | ··-·CCE-83454-9 | ||
| 101 | ··-·enable_strategy | ||
| 102 | ··-·low_complexity | ||
| 103 | ··-·low_disruption | ||
| 104 | ··-·medium_severity | ||
| 105 | ··-·no_reboot_needed | ||
| 106 | ··-·package_dnf-automatic_installed | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 91 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 92 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 93 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 94 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 112 | include·install_dnf-automatic | 95 | include·install_dnf-automatic |
| 113 | class·install_dnf-automatic·{ | 96 | class·install_dnf-automatic·{ |
| 114 | ··package·{·'dnf-automatic': | 97 | ··package·{·'dnf-automatic': |
| 115 | ····ensure·=>·'installed', | 98 | ····ensure·=>·'installed', |
| 116 | ··} | 99 | ··} |
| 117 | } | 100 | } |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"dnf-automatic" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 106 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| Offset 133, 21 lines modified | Offset 111, 43 lines modified | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | package·install·dnf-automatic | 116 | package·install·dnf-automatic |
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | [[packages]] | ||
| 119 | name·=·"dnf-automatic" | ||
| 120 | version·=·"*" | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | package·--add=dnf-automatic | 126 | package·--add=dnf-automatic |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 133 | ··package: | ||
| 134 | ····name:·dnf-automatic | ||
| 135 | ····state:·present | ||
| 136 | ··tags: | ||
| 137 | ··-·CCE-83454-9 | ||
| 138 | ··-·enable_strategy | ||
| 139 | ··-·low_complexity | ||
| 140 | ··-·low_disruption | ||
| 141 | ··-·medium_severity | ||
| 142 | ··-·no_reboot_needed | ||
| 143 | ··-·package_dnf-automatic_installed | ||
| 145 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 144 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 146 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 145 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 147 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 146 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 148 | automatic.conf. | 147 | automatic.conf. |
| 149 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 148 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 150 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 149 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 151 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 150 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 158, 37 lines modified | Offset 158, 14 lines modified | ||
| 158 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 158 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 159 | Identifiers:·CCE-83456-4 | 159 | Identifiers:·CCE-83456-4 |
| 160 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 160 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 161 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 161 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 162 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 162 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 163 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 163 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 164 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 164 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 170 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 171 | ··ini_file: | ||
| 172 | ····dest:·/etc/dnf/automatic.conf | ||
| 173 | ····section:·commands | ||
| 174 | ····option:·apply_updates | ||
| 175 | ····value:·'yes' | ||
| Max diff block lines reached; 202185/208058 bytes (97.18%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037de0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037df0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037df0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e00:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e00:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e10:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e10:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e20:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e20:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | 00037e40:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | ||
| 00037e50:·312d·303 | 00037e50:·312d·3037·290a·2020·2020·2020·2020·2020··1-07).·········· | ||
| 00037e60:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e60:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e70:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e70:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037e80:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037e80:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037e90:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037e90:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037ea0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037ea0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037eb0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037eb0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ec0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ec0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15169, 252 lines modified | Offset 15169, 252 lines modified | ||
| 0003b400:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b400:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b410:·2223·6964·6d39·3230·3022·2074·6162·696e··"#idm9200"·tabin | 0003b410:·2223·6964·6d39·3230·3022·2074·6162·696e··"#idm9200"·tabin | ||
| 0003b420:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b420:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b430:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b430:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b440:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b440:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b450:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b450:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b460:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b460:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b470:·3e52·656d·6564·6961·7469·6f6e·204b·7562··>Remediation·Kub | |||
| 0003b480:·6572·6e65·7465·7320·736e·6970·7065·7420··ernetes·snippet· | |||
| 0003b490:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4c0:·6964·3d22·6964·6d39·3230·3022·3e3c·7461··id="idm9200"><ta | |||
| 0003b4d0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b4e0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b4f0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b500:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b510:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b520:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b530:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b540:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b550:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b560:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b570:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0003b580:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b590:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b5a0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003b5b0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b5c0:·3c63·6f64·653e·2d2d·2d0a·6170·6956·6572··<code>---.apiVer | |||
| 0003b5d0:·7369·6f6e·3a20·6d61·6368·696e·6563·6f6e··sion:·machinecon | |||
| 0003b5e0:·6669·6775·7261·7469·6f6e·2e6f·7065·6e73··figuration.opens | |||
| 0003b5f0:·6869·6674·2e69·6f2f·7631·0a6b·696e·643a··hift.io/v1.kind: | |||
| 0003b600:·204d·6163·6869·6e65·436f·6e66·6967·0a73···MachineConfig.s | |||
| 0003b610:·7065·633a·0a20·2063·6f6e·6669·673a·0a20··pec:.··config:.· | |||
| 0003b620:·2020·2069·676e·6974·696f·6e3a·0a20·2020·····ignition:.··· | |||
| 0003b630:·2020·2076·6572·7369·6f6e·3a20·332e·312e·····version:·3.1. | |||
| 0003b640:·300a·2020·2020·7379·7374·656d·643a·0a20··0.····systemd:.· | |||
| 0003b650:·2020·2020·2075·6e69·7473·3a0a·2020·2020·······units:.···· | |||
| 0003b660:·2020·2020·2d20·6e61·6d65·3a20·636f·6e66······-·name:·conf | |||
| 0003b670:·6967·7572·652d·6372·7970·746f·2d70·6f6c··igure-crypto-pol | |||
| 0003b680:·6963·792e·7365·7276·6963·650a·2020·2020··icy.service.···· | |||
| 0003b690:·2020·2020·2020·656e·6162·6c65·643a·2074········enabled:·t | |||
| 0003b6a0:·7275·650a·2020·2020·2020·2020·2020·636f··rue.··········co | |||
| 0003b6b0:·6e74·656e·7473·3a20·7c0a·2020·2020·2020··ntents:·|.······ | |||
| 0003b6c0:·2020·2020·2020·5b55·6e69·745d·0a20·2020········[Unit].··· | |||
| 0003b6d0:·2020·2020·2020·2020·2042·6566·6f72·653d···········Before= | |||
| 0003b6e0:·6b75·6265·6c65·742e·7365·7276·6963·650a··kubelet.service. | |||
| 0003b6f0:·2020·2020·2020·2020·2020·2020·5b53·6572··············[Ser | |||
| 0003b700:·7669·6365·5d0a·2020·2020·2020·2020·2020··vice].·········· | |||
| 0003b710:·2020·5479·7065·3d6f·6e65·7368·6f74·0a20····Type=oneshot.· | |||
| 0003b720:·2020·2020·2020·2020·2020·2045·7865·6353·············ExecS | |||
| 0003b730:·7461·7274·3d75·7064·6174·652d·6372·7970··tart=update-cryp | |||
| 0003b740:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003b750:·7420·7b7b·2e76·6172·5f73·7973·7465·6d5f··t·{{.var_system_ | |||
| 0003b760:·6372·7970·746f·5f70·6f6c·6963·797d·7d0a··crypto_policy}}. | |||
| 0003b770:·2020·2020·2020·2020·2020·2020·5265·6d61··············Rema | |||
| 0003b780:·696e·4166·7465·7245·7869·743d·7965·730a··inAfterExit=yes. | |||
| 0003b790:·2020·2020·2020·2020·2020·2020·5b49·6e73··············[Ins | |||
| 0003b7a0:·7461·6c6c·5d0a·2020·2020·2020·2020·2020··tall].·········· | |||
| 0003b7b0:·2020·5761·6e74·6564·4279·3d6d·756c·7469····WantedBy=multi | |||
| 0003b7c0:·2d75·7365·722e·7461·7267·6574·0a3c·2f63··-user.target.</c | |||
| 0003b7d0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b7e0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b7f0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b800:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b810:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b820:·6964·6d39·3230·3122·2074·6162·696e·6465··idm9201"·tabinde | |||
| 0003b830:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b840:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b850:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b860:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b870:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b880:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b890:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b8a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b8b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b8c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d39··llapse"·id="idm9 | |||
| 0003b8d0:·3230·3122·3e3c·7072·653e·3c63·6f64·653e··201"><pre><code> | |||
| 0003b8e0:·0a76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | |||
| 0003b8f0:·746f·5f70·6f6c·6963·793d·273c·6162·6272··to_policy='<abbr | |||
| 0003b900:·2074·6974·6c65·3d22·6672·6f6d·2050·726f···title="from·Pro | |||
| 0003b910:·6669·6c65·2f72·6566·696e·652d·7661·6c75··file/refine-valu | |||
| 0003b920:·653a·2078·6363·6466·5f6f·7267·2e73·7367··e:·xccdf_org.ssg | |||
| 0003b930:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | |||
| 0003b940:·7661·6c75·655f·7661·725f·7379·7374·656d··value_var_system | |||
| 0003b950:·5f63·7279·7074·6f5f·706f·6c69·6379·223e··_crypto_policy"> | |||
| 0003b960:·4445·4641·554c·543c·2f61·6262·723e·270a··DEFAULT</abbr>'. | |||
| 0003b970:·0a0a·7374·6465·7272·5f6f·665f·6361·6c6c··..stderr_of_call | |||
| 0003b980:·3d24·2875·7064·6174·652d·6372·7970·746f··=$(update-crypto | |||
| 0003b990:·2d70·6f6c·6963·6965·7320·2d2d·7365·7420··-policies·--set· | |||
| 0003b9a0:·247b·7661·725f·7379·7374·656d·5f63·7279··${var_system_cry | |||
| 0003b9b0:·7074·6f5f·706f·6c69·6379·7d20·3226·6774··pto_policy}·2> | |||
| 0003b9c0:·3b26·616d·703b·3120·2667·743b·202f·6465··;&1·>·/de | |||
| 0003b9d0:·762f·6e75·6c6c·290a·7263·3d24·3f0a·0a69··v/null).rc=$?..i | |||
| 0003b9e0:·6620·7465·7374·2022·2472·6322·203d·2031··f·test·"$rc"·=·1 | |||
| 0003b9f0:·3237·3b20·7468·656e·0a09·6563·686f·2022··27;·then..echo·" | |||
| 0003ba00:·2473·7464·6572·725f·6f66·5f63·616c·6c22··$stderr_of_call" | |||
| 0003ba10:·2026·6774·3b26·616d·703b·320a·0965·6368···>&2..ech | |||
| 0003ba20:·6f20·224d·616b·6520·7375·7265·2074·6861··o·"Make·sure·tha | |||
| 0003ba30:·7420·7468·6520·7363·7269·7074·2069·7320··t·the·script·is· | |||
| 0003ba40:·696e·7374·616c·6c65·6420·6f6e·2074·6865··installed·on·the | |||
| 0003ba50:·2072·656d·6564·6961·7465·6420·7379·7374···remediated·syst | |||
| 0003ba60:·656d·2e22·2026·6774·3b26·616d·703b·320a··em."·>&2. | |||
| 0003ba70:·0965·6368·6f20·2253·6565·206f·7574·7075··.echo·"See·outpu | |||
| 0003ba80:·7420·6f66·2074·6865·2027·646e·6620·7072··t·of·the·'dnf·pr | |||
| 0003ba90:·6f76·6964·6573·2075·7064·6174·652d·6372··ovides·update-cr | |||
| 0003baa0:·7970·746f·2d70·6f6c·6963·6965·7327·2063··ypto-policies'·c | |||
| 0003bab0:·6f6d·6d61·6e64·2220·2667·743b·2661·6d70··ommand"·>& | |||
| 0003bac0:·3b32·0a09·6563·686f·2022·746f·2073·6565··;2..echo·"to·see | |||
| 0003bad0:·2077·6861·7420·7061·636b·6167·6520·746f···what·package·to | |||
| 0003bae0:·2028·7265·2969·6e73·7461·6c6c·2220·2667···(re)install"·&g | |||
| Max diff block lines reached; 12883273/12917827 bytes (99.73%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Advanced | 43 | ··············Linux·9·-·Advanced |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 104, 14 lines modified | Offset 104, 58 lines modified | ||
| 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 106 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 106 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 107 | ·············_\x8c_\x8i_\x8s······1.6.1 | 107 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 116 | --- | ||
| 117 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 118 | kind:·MachineConfig | ||
| 119 | spec: | ||
| 120 | ··config: | ||
| 121 | ····ignition: | ||
| 122 | ······version:·3.1.0 | ||
| 123 | ····systemd: | ||
| 124 | ······units: | ||
| 125 | ········-·name:·configure-crypto-policy.service | ||
| 126 | ··········enabled:·true | ||
| 127 | ··········contents:·| | ||
| 128 | ············[Unit] | ||
| 129 | ············Before=kubelet.service | ||
| 130 | ············[Service] | ||
| 131 | ············Type=oneshot | ||
| 132 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 133 | ············RemainAfterExit=yes | ||
| 134 | ············[Install] | ||
| 135 | ············WantedBy=multi-user.target | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | var_system_crypto_policy='DEFAULT' | ||
| 138 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 139 | rc=$? | ||
| 140 | if·test·"$rc"·=·127;·then | ||
| 141 | » echo·"$stderr_of_call"·>&2 | ||
| 142 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 143 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 144 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 145 | » false··#·end·with·an·error·code | ||
| 146 | elif·test·"$rc"·!=·0;·then | ||
| 147 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 148 | » false··#·end·with·an·error·code | ||
| 149 | fi | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 116 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 155 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 117 | ··set_fact: | 156 | ··set_fact: |
| Offset 162, 58 lines modified | Offset 206, 14 lines modified | ||
| 162 | ··-·PCI-DSSv4-2.2.7 | 206 | ··-·PCI-DSSv4-2.2.7 |
| 163 | ··-·configure_crypto_policy | 207 | ··-·configure_crypto_policy |
| 164 | ··-·high_severity | 208 | ··-·high_severity |
| 165 | ··-·low_complexity | 209 | ··-·low_complexity |
| 166 | ··-·low_disruption | 210 | ··-·low_disruption |
| 167 | ··-·no_reboot_needed | 211 | ··-·no_reboot_needed |
| 168 | ··-·restrict_strategy | 212 | ··-·restrict_strategy |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 174 | --- | ||
| 175 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 176 | kind:·MachineConfig | ||
| 177 | spec: | ||
| 178 | ··config: | ||
| 179 | ····ignition: | ||
| 180 | ······version:·3.1.0 | ||
| 181 | ····systemd: | ||
| 182 | ······units: | ||
| 183 | ········-·name:·configure-crypto-policy.service | ||
| 184 | ··········enabled:·true | ||
| 185 | ··········contents:·| | ||
| 186 | ············[Unit] | ||
| 187 | ············Before=kubelet.service | ||
| 188 | ············[Service] | ||
| 189 | ············Type=oneshot | ||
| 190 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 191 | ············RemainAfterExit=yes | ||
| 192 | ············[Install] | ||
| 193 | ············WantedBy=multi-user.target | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | var_system_crypto_policy='DEFAULT' | ||
| 196 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 197 | rc=$? | ||
| 198 | if·test·"$rc"·=·127;·then | ||
| 199 | » echo·"$stderr_of_call"·>&2 | ||
| 200 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 201 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 202 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 203 | » false··#·end·with·an·error·code | ||
| 204 | elif·test·"$rc"·!=·0;·then | ||
| 205 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | fi | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 1139693/1145396 bytes (99.50%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037dd0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037de0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037de0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037df0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037df0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e00:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e00:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e10:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e10:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e20:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e20:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e30:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e30:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e40:·3234·2d31·312d·303 | 00037e40:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00037e50:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e50:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e60:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e60:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037e70:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037e70:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037e80:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037e80:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037e90:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037e90:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ea0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ea0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037eb0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037eb0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15129, 252 lines modified | Offset 15129, 252 lines modified | ||
| 0003b180:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b180:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b190:·3d22·2369·646d·3932·3030·2220·7461·6269··="#idm9200"·tabi | 0003b190:·3d22·2369·646d·3932·3030·2220·7461·6269··="#idm9200"·tabi | ||
| 0003b1a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b1a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b1b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b1b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b1c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b1c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b1d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b1d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b1e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b1e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b1f0:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | |||
| 0003b200:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0003b210:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b220:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b230:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b240:·2069·643d·2269·646d·3932·3030·223e·3c74···id="idm9200"><t | |||
| 0003b250:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b260:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b270:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b280:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b290:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b2a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b2b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b2c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b2d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b2e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b2f0:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0003b300:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b310:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b320:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003b330:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b340:·3e3c·636f·6465·3e2d·2d2d·0a61·7069·5665··><code>---.apiVe | |||
| 0003b350:·7273·696f·6e3a·206d·6163·6869·6e65·636f··rsion:·machineco | |||
| 0003b360:·6e66·6967·7572·6174·696f·6e2e·6f70·656e··nfiguration.open | |||
| 0003b370:·7368·6966·742e·696f·2f76·310a·6b69·6e64··shift.io/v1.kind | |||
| 0003b380:·3a20·4d61·6368·696e·6543·6f6e·6669·670a··:·MachineConfig. | |||
| 0003b390:·7370·6563·3a0a·2020·636f·6e66·6967·3a0a··spec:.··config:. | |||
| 0003b3a0:·2020·2020·6967·6e69·7469·6f6e·3a0a·2020······ignition:.·· | |||
| 0003b3b0:·2020·2020·7665·7273·696f·6e3a·2033·2e31······version:·3.1 | |||
| 0003b3c0:·2e30·0a20·2020·2073·7973·7465·6d64·3a0a··.0.····systemd:. | |||
| 0003b3d0:·2020·2020·2020·756e·6974·733a·0a20·2020········units:.··· | |||
| 0003b3e0:·2020·2020·202d·206e·616d·653a·2063·6f6e·······-·name:·con | |||
| 0003b3f0:·6669·6775·7265·2d63·7279·7074·6f2d·706f··figure-crypto-po | |||
| 0003b400:·6c69·6379·2e73·6572·7669·6365·0a20·2020··licy.service.··· | |||
| 0003b410:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 0003b420:·7472·7565·0a20·2020·2020·2020·2020·2063··true.··········c | |||
| 0003b430:·6f6e·7465·6e74·733a·207c·0a20·2020·2020··ontents:·|.····· | |||
| 0003b440:·2020·2020·2020·205b·556e·6974·5d0a·2020·········[Unit].·· | |||
| 0003b450:·2020·2020·2020·2020·2020·4265·666f·7265············Before | |||
| 0003b460:·3d6b·7562·656c·6574·2e73·6572·7669·6365··=kubelet.service | |||
| 0003b470:·0a20·2020·2020·2020·2020·2020·205b·5365··.············[Se | |||
| 0003b480:·7276·6963·655d·0a20·2020·2020·2020·2020··rvice].········· | |||
| 0003b490:·2020·2054·7970·653d·6f6e·6573·686f·740a·····Type=oneshot. | |||
| 0003b4a0:·2020·2020·2020·2020·2020·2020·4578·6563··············Exec | |||
| 0003b4b0:·5374·6172·743d·7570·6461·7465·2d63·7279··Start=update-cry | |||
| 0003b4c0:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 0003b4d0:·6574·207b·7b2e·7661·725f·7379·7374·656d··et·{{.var_system | |||
| 0003b4e0:·5f63·7279·7074·6f5f·706f·6c69·6379·7d7d··_crypto_policy}} | |||
| 0003b4f0:·0a20·2020·2020·2020·2020·2020·2052·656d··.············Rem | |||
| 0003b500:·6169·6e41·6674·6572·4578·6974·3d79·6573··ainAfterExit=yes | |||
| 0003b510:·0a20·2020·2020·2020·2020·2020·205b·496e··.············[In | |||
| 0003b520:·7374·616c·6c5d·0a20·2020·2020·2020·2020··stall].········· | |||
| 0003b530:·2020·2057·616e·7465·6442·793d·6d75·6c74·····WantedBy=mult | |||
| 0003b540:·692d·7573·6572·2e74·6172·6765·740a·3c2f··i-user.target.</ | |||
| 0003b550:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b560:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b570:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b580:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b590:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b5a0:·2369·646d·3932·3031·2220·7461·6269·6e64··#idm9201"·tabind | |||
| 0003b5b0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b5c0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b5d0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b5e0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b5f0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b600:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003b610:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b620:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b630:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b640:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b650:·3932·3031·223e·3c70·7265·3e3c·636f·6465··9201"><pre><code | |||
| 0003b660:·3e0a·7661·725f·7379·7374·656d·5f63·7279··>.var_system_cry | |||
| 0003b670:·7074·6f5f·706f·6c69·6379·3d27·3c61·6262··pto_policy='<abb | |||
| 0003b680:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | |||
| 0003b690:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | |||
| 0003b6a0:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | |||
| 0003b6b0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | |||
| 0003b6c0:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | |||
| 0003b6d0:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | |||
| 0003b6e0:·3e44·4546·4155·4c54·3c2f·6162·6272·3e27··>DEFAULT</abbr>' | |||
| 0003b6f0:·0a0a·0a73·7464·6572·725f·6f66·5f63·616c··...stderr_of_cal | |||
| 0003b700:·6c3d·2428·7570·6461·7465·2d63·7279·7074··l=$(update-crypt | |||
| 0003b710:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | |||
| 0003b720:·2024·7b76·6172·5f73·7973·7465·6d5f·6372···${var_system_cr | |||
| 0003b730:·7970·746f·5f70·6f6c·6963·797d·2032·2667··ypto_policy}·2&g | |||
| 0003b740:·743b·2661·6d70·3b31·2026·6774·3b20·2f64··t;&1·>·/d | |||
| 0003b750:·6576·2f6e·756c·6c29·0a72·633d·243f·0a0a··ev/null).rc=$?.. | |||
| 0003b760:·6966·2074·6573·7420·2224·7263·2220·3d20··if·test·"$rc"·=· | |||
| 0003b770:·3132·373b·2074·6865·6e0a·0965·6368·6f20··127;·then..echo· | |||
| 0003b780:·2224·7374·6465·7272·5f6f·665f·6361·6c6c··"$stderr_of_call | |||
| 0003b790:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 0003b7a0:·686f·2022·4d61·6b65·2073·7572·6520·7468··ho·"Make·sure·th | |||
| 0003b7b0:·6174·2074·6865·2073·6372·6970·7420·6973··at·the·script·is | |||
| 0003b7c0:·2069·6e73·7461·6c6c·6564·206f·6e20·7468···installed·on·th | |||
| 0003b7d0:·6520·7265·6d65·6469·6174·6564·2073·7973··e·remediated·sys | |||
| 0003b7e0:·7465·6d2e·2220·2667·743b·2661·6d70·3b32··tem."·>&2 | |||
| 0003b7f0:·0a09·6563·686f·2022·5365·6520·6f75·7470··..echo·"See·outp | |||
| 0003b800:·7574·206f·6620·7468·6520·2764·6e66·2070··ut·of·the·'dnf·p | |||
| 0003b810:·726f·7669·6465·7320·7570·6461·7465·2d63··rovides·update-c | |||
| 0003b820:·7279·7074·6f2d·706f·6c69·6369·6573·2720··rypto-policies'· | |||
| 0003b830:·636f·6d6d·616e·6422·2026·6774·3b26·616d··command"·>&am | |||
| 0003b840:·703b·320a·0965·6368·6f20·2274·6f20·7365··p;2..echo·"to·se | |||
| 0003b850:·6520·7768·6174·2070·6163·6b61·6765·2074··e·what·package·t | |||
| 0003b860:·6f20·2872·6529·696e·7374·616c·6c22·2026··o·(re)install"·& | |||
| Max diff block lines reached; 8792650/8827204 bytes (99.61%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Basic | 43 | ··············Linux·9·-·Basic |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 96, 14 lines modified | Offset 96, 58 lines modified | ||
| 96 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 96 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 97 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 97 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 98 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 98 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 99 | ·············_\x8c_\x8i_\x8s······1.6.1 | 99 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 100 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 100 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 101 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 101 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 108 | --- | ||
| 109 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 110 | kind:·MachineConfig | ||
| 111 | spec: | ||
| 112 | ··config: | ||
| 113 | ····ignition: | ||
| 114 | ······version:·3.1.0 | ||
| 115 | ····systemd: | ||
| 116 | ······units: | ||
| 117 | ········-·name:·configure-crypto-policy.service | ||
| 118 | ··········enabled:·true | ||
| 119 | ··········contents:·| | ||
| 120 | ············[Unit] | ||
| 121 | ············Before=kubelet.service | ||
| 122 | ············[Service] | ||
| 123 | ············Type=oneshot | ||
| 124 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 125 | ············RemainAfterExit=yes | ||
| 126 | ············[Install] | ||
| 127 | ············WantedBy=multi-user.target | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | var_system_crypto_policy='DEFAULT' | ||
| 130 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 131 | rc=$? | ||
| 132 | if·test·"$rc"·=·127;·then | ||
| 133 | » echo·"$stderr_of_call"·>&2 | ||
| 134 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 135 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 136 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 137 | » false··#·end·with·an·error·code | ||
| 138 | elif·test·"$rc"·!=·0;·then | ||
| 139 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 140 | » false··#·end·with·an·error·code | ||
| 141 | fi | ||
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 108 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 147 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 109 | ··set_fact: | 148 | ··set_fact: |
| Offset 154, 58 lines modified | Offset 198, 14 lines modified | ||
| 154 | ··-·PCI-DSSv4-2.2.7 | 198 | ··-·PCI-DSSv4-2.2.7 |
| 155 | ··-·configure_crypto_policy | 199 | ··-·configure_crypto_policy |
| 156 | ··-·high_severity | 200 | ··-·high_severity |
| 157 | ··-·low_complexity | 201 | ··-·low_complexity |
| 158 | ··-·low_disruption | 202 | ··-·low_disruption |
| 159 | ··-·no_reboot_needed | 203 | ··-·no_reboot_needed |
| 160 | ··-·restrict_strategy | 204 | ··-·restrict_strategy |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 166 | --- | ||
| 167 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 168 | kind:·MachineConfig | ||
| 169 | spec: | ||
| 170 | ··config: | ||
| 171 | ····ignition: | ||
| 172 | ······version:·3.1.0 | ||
| 173 | ····systemd: | ||
| 174 | ······units: | ||
| 175 | ········-·name:·configure-crypto-policy.service | ||
| 176 | ··········enabled:·true | ||
| 177 | ··········contents:·| | ||
| 178 | ············[Unit] | ||
| 179 | ············Before=kubelet.service | ||
| 180 | ············[Service] | ||
| 181 | ············Type=oneshot | ||
| 182 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 183 | ············RemainAfterExit=yes | ||
| 184 | ············[Install] | ||
| 185 | ············WantedBy=multi-user.target | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 187 | var_system_crypto_policy='DEFAULT' | ||
| 188 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 189 | rc=$? | ||
| 190 | if·test·"$rc"·=·127;·then | ||
| 191 | » echo·"$stderr_of_call"·>&2 | ||
| 192 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 193 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 194 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 195 | » false··#·end·with·an·error·code | ||
| 196 | elif·test·"$rc"·!=·0;·then | ||
| 197 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 198 | » false··#·end·with·an·error·code | ||
| 199 | fi | ||
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 853661/859356 bytes (99.34%) of diff not shown. | |||
| Offset 14304, 15 lines modified | Offset 14304, 15 lines modified | ||
| 00037df0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037df0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037e00:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037e00:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e10:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e10:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e20:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e20:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e30:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e30:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | 00037e50:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | ||
| 00037e60:·312d·303 | 00037e60:·312d·3037·290a·2020·2020·2020·2020·2020··1-07).·········· | ||
| 00037e70:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e70:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e80:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e80:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037e90:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037e90:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037ea0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037ea0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037eb0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037eb0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037ec0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037ec0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ed0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ed0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15170, 252 lines modified | Offset 15170, 252 lines modified | ||
| 0003b410:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b410:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b420:·2223·6964·6d39·3230·3022·2074·6162·696e··"#idm9200"·tabin | 0003b420:·2223·6964·6d39·3230·3022·2074·6162·696e··"#idm9200"·tabin | ||
| 0003b430:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b430:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b440:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b440:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b450:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b450:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b460:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b460:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b470:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b470:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b480:·3e52·656d·6564·6961·7469·6f6e·204b·7562··>Remediation·Kub | |||
| 0003b490:·6572·6e65·7465·7320·736e·6970·7065·7420··ernetes·snippet· | |||
| 0003b4a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4d0:·6964·3d22·6964·6d39·3230·3022·3e3c·7461··id="idm9200"><ta | |||
| 0003b4e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b4f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b500:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b510:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b520:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b530:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b540:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b550:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b560:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b570:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b580:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0003b590:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b5a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b5b0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003b5c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b5d0:·3c63·6f64·653e·2d2d·2d0a·6170·6956·6572··<code>---.apiVer | |||
| 0003b5e0:·7369·6f6e·3a20·6d61·6368·696e·6563·6f6e··sion:·machinecon | |||
| 0003b5f0:·6669·6775·7261·7469·6f6e·2e6f·7065·6e73··figuration.opens | |||
| 0003b600:·6869·6674·2e69·6f2f·7631·0a6b·696e·643a··hift.io/v1.kind: | |||
| 0003b610:·204d·6163·6869·6e65·436f·6e66·6967·0a73···MachineConfig.s | |||
| 0003b620:·7065·633a·0a20·2063·6f6e·6669·673a·0a20··pec:.··config:.· | |||
| 0003b630:·2020·2069·676e·6974·696f·6e3a·0a20·2020·····ignition:.··· | |||
| 0003b640:·2020·2076·6572·7369·6f6e·3a20·332e·312e·····version:·3.1. | |||
| 0003b650:·300a·2020·2020·7379·7374·656d·643a·0a20··0.····systemd:.· | |||
| 0003b660:·2020·2020·2075·6e69·7473·3a0a·2020·2020·······units:.···· | |||
| 0003b670:·2020·2020·2d20·6e61·6d65·3a20·636f·6e66······-·name:·conf | |||
| 0003b680:·6967·7572·652d·6372·7970·746f·2d70·6f6c··igure-crypto-pol | |||
| 0003b690:·6963·792e·7365·7276·6963·650a·2020·2020··icy.service.···· | |||
| 0003b6a0:·2020·2020·2020·656e·6162·6c65·643a·2074········enabled:·t | |||
| 0003b6b0:·7275·650a·2020·2020·2020·2020·2020·636f··rue.··········co | |||
| 0003b6c0:·6e74·656e·7473·3a20·7c0a·2020·2020·2020··ntents:·|.······ | |||
| 0003b6d0:·2020·2020·2020·5b55·6e69·745d·0a20·2020········[Unit].··· | |||
| 0003b6e0:·2020·2020·2020·2020·2042·6566·6f72·653d···········Before= | |||
| 0003b6f0:·6b75·6265·6c65·742e·7365·7276·6963·650a··kubelet.service. | |||
| 0003b700:·2020·2020·2020·2020·2020·2020·5b53·6572··············[Ser | |||
| 0003b710:·7669·6365·5d0a·2020·2020·2020·2020·2020··vice].·········· | |||
| 0003b720:·2020·5479·7065·3d6f·6e65·7368·6f74·0a20····Type=oneshot.· | |||
| 0003b730:·2020·2020·2020·2020·2020·2045·7865·6353·············ExecS | |||
| 0003b740:·7461·7274·3d75·7064·6174·652d·6372·7970··tart=update-cryp | |||
| 0003b750:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003b760:·7420·7b7b·2e76·6172·5f73·7973·7465·6d5f··t·{{.var_system_ | |||
| 0003b770:·6372·7970·746f·5f70·6f6c·6963·797d·7d0a··crypto_policy}}. | |||
| 0003b780:·2020·2020·2020·2020·2020·2020·5265·6d61··············Rema | |||
| 0003b790:·696e·4166·7465·7245·7869·743d·7965·730a··inAfterExit=yes. | |||
| 0003b7a0:·2020·2020·2020·2020·2020·2020·5b49·6e73··············[Ins | |||
| 0003b7b0:·7461·6c6c·5d0a·2020·2020·2020·2020·2020··tall].·········· | |||
| 0003b7c0:·2020·5761·6e74·6564·4279·3d6d·756c·7469····WantedBy=multi | |||
| 0003b7d0:·2d75·7365·722e·7461·7267·6574·0a3c·2f63··-user.target.</c | |||
| 0003b7e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b7f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b800:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b810:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b820:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b830:·6964·6d39·3230·3122·2074·6162·696e·6465··idm9201"·tabinde | |||
| 0003b840:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b850:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b860:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b870:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b880:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b890:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003b8a0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b8b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b8c0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b8d0:·6c6c·6170·7365·2220·6964·3d22·6964·6d39··llapse"·id="idm9 | |||
| 0003b8e0:·3230·3122·3e3c·7072·653e·3c63·6f64·653e··201"><pre><code> | |||
| 0003b8f0:·0a76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | |||
| 0003b900:·746f·5f70·6f6c·6963·793d·273c·6162·6272··to_policy='<abbr | |||
| 0003b910:·2074·6974·6c65·3d22·6672·6f6d·2050·726f···title="from·Pro | |||
| 0003b920:·6669·6c65·2f72·6566·696e·652d·7661·6c75··file/refine-valu | |||
| 0003b930:·653a·2078·6363·6466·5f6f·7267·2e73·7367··e:·xccdf_org.ssg | |||
| 0003b940:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | |||
| 0003b950:·7661·6c75·655f·7661·725f·7379·7374·656d··value_var_system | |||
| 0003b960:·5f63·7279·7074·6f5f·706f·6c69·6379·223e··_crypto_policy"> | |||
| 0003b970:·4445·4641·554c·543c·2f61·6262·723e·270a··DEFAULT</abbr>'. | |||
| 0003b980:·0a0a·7374·6465·7272·5f6f·665f·6361·6c6c··..stderr_of_call | |||
| 0003b990:·3d24·2875·7064·6174·652d·6372·7970·746f··=$(update-crypto | |||
| 0003b9a0:·2d70·6f6c·6963·6965·7320·2d2d·7365·7420··-policies·--set· | |||
| 0003b9b0:·247b·7661·725f·7379·7374·656d·5f63·7279··${var_system_cry | |||
| 0003b9c0:·7074·6f5f·706f·6c69·6379·7d20·3226·6774··pto_policy}·2> | |||
| 0003b9d0:·3b26·616d·703b·3120·2667·743b·202f·6465··;&1·>·/de | |||
| 0003b9e0:·762f·6e75·6c6c·290a·7263·3d24·3f0a·0a69··v/null).rc=$?..i | |||
| 0003b9f0:·6620·7465·7374·2022·2472·6322·203d·2031··f·test·"$rc"·=·1 | |||
| 0003ba00:·3237·3b20·7468·656e·0a09·6563·686f·2022··27;·then..echo·" | |||
| 0003ba10:·2473·7464·6572·725f·6f66·5f63·616c·6c22··$stderr_of_call" | |||
| 0003ba20:·2026·6774·3b26·616d·703b·320a·0965·6368···>&2..ech | |||
| 0003ba30:·6f20·224d·616b·6520·7375·7265·2074·6861··o·"Make·sure·tha | |||
| 0003ba40:·7420·7468·6520·7363·7269·7074·2069·7320··t·the·script·is· | |||
| 0003ba50:·696e·7374·616c·6c65·6420·6f6e·2074·6865··installed·on·the | |||
| 0003ba60:·2072·656d·6564·6961·7465·6420·7379·7374···remediated·syst | |||
| 0003ba70:·656d·2e22·2026·6774·3b26·616d·703b·320a··em."·>&2. | |||
| 0003ba80:·0965·6368·6f20·2253·6565·206f·7574·7075··.echo·"See·outpu | |||
| 0003ba90:·7420·6f66·2074·6865·2027·646e·6620·7072··t·of·the·'dnf·pr | |||
| 0003baa0:·6f76·6964·6573·2075·7064·6174·652d·6372··ovides·update-cr | |||
| 0003bab0:·7970·746f·2d70·6f6c·6963·6965·7327·2063··ypto-policies'·c | |||
| 0003bac0:·6f6d·6d61·6e64·2220·2667·743b·2661·6d70··ommand"·>& | |||
| 0003bad0:·3b32·0a09·6563·686f·2022·746f·2073·6565··;2..echo·"to·see | |||
| 0003bae0:·2077·6861·7420·7061·636b·6167·6520·746f···what·package·to | |||
| 0003baf0:·2028·7265·2969·6e73·7461·6c6c·2220·2667···(re)install"·&g | |||
| Max diff block lines reached; 10045974/10080528 bytes (99.66%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Intermediate | 43 | ··············Linux·9·-·Intermediate |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 104, 14 lines modified | Offset 104, 58 lines modified | ||
| 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 106 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 106 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 107 | ·············_\x8c_\x8i_\x8s······1.6.1 | 107 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 116 | --- | ||
| 117 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 118 | kind:·MachineConfig | ||
| 119 | spec: | ||
| 120 | ··config: | ||
| 121 | ····ignition: | ||
| 122 | ······version:·3.1.0 | ||
| 123 | ····systemd: | ||
| 124 | ······units: | ||
| 125 | ········-·name:·configure-crypto-policy.service | ||
| 126 | ··········enabled:·true | ||
| 127 | ··········contents:·| | ||
| 128 | ············[Unit] | ||
| 129 | ············Before=kubelet.service | ||
| 130 | ············[Service] | ||
| 131 | ············Type=oneshot | ||
| 132 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 133 | ············RemainAfterExit=yes | ||
| 134 | ············[Install] | ||
| 135 | ············WantedBy=multi-user.target | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | var_system_crypto_policy='DEFAULT' | ||
| 138 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 139 | rc=$? | ||
| 140 | if·test·"$rc"·=·127;·then | ||
| 141 | » echo·"$stderr_of_call"·>&2 | ||
| 142 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 143 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 144 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 145 | » false··#·end·with·an·error·code | ||
| 146 | elif·test·"$rc"·!=·0;·then | ||
| 147 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 148 | » false··#·end·with·an·error·code | ||
| 149 | fi | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 116 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 155 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 117 | ··set_fact: | 156 | ··set_fact: |
| Offset 162, 58 lines modified | Offset 206, 14 lines modified | ||
| 162 | ··-·PCI-DSSv4-2.2.7 | 206 | ··-·PCI-DSSv4-2.2.7 |
| 163 | ··-·configure_crypto_policy | 207 | ··-·configure_crypto_policy |
| 164 | ··-·high_severity | 208 | ··-·high_severity |
| 165 | ··-·low_complexity | 209 | ··-·low_complexity |
| 166 | ··-·low_disruption | 210 | ··-·low_disruption |
| 167 | ··-·no_reboot_needed | 211 | ··-·no_reboot_needed |
| 168 | ··-·restrict_strategy | 212 | ··-·restrict_strategy |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 174 | --- | ||
| 175 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 176 | kind:·MachineConfig | ||
| 177 | spec: | ||
| 178 | ··config: | ||
| 179 | ····ignition: | ||
| 180 | ······version:·3.1.0 | ||
| 181 | ····systemd: | ||
| 182 | ······units: | ||
| 183 | ········-·name:·configure-crypto-policy.service | ||
| 184 | ··········enabled:·true | ||
| 185 | ··········contents:·| | ||
| 186 | ············[Unit] | ||
| 187 | ············Before=kubelet.service | ||
| 188 | ············[Service] | ||
| 189 | ············Type=oneshot | ||
| 190 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 191 | ············RemainAfterExit=yes | ||
| 192 | ············[Install] | ||
| 193 | ············WantedBy=multi-user.target | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | var_system_crypto_policy='DEFAULT' | ||
| 196 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 197 | rc=$? | ||
| 198 | if·test·"$rc"·=·127;·then | ||
| 199 | » echo·"$stderr_of_call"·>&2 | ||
| 200 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 201 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 202 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 203 | » false··#·end·with·an·error·code | ||
| 204 | elif·test·"$rc"·!=·0;·then | ||
| 205 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | fi | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 1040223/1045934 bytes (99.45%) of diff not shown. | |||
| Offset 14299, 15 lines modified | Offset 14299, 15 lines modified | ||
| 00037da0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037da0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037db0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037db0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037dc0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037dc0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037dd0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037dd0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037de0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037de0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037df0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037df0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e00:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e00:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e10:·6620·3230·3234·2d31·312d·303 | 00037e10:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00037e20:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e20:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e30:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e30:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e40:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e40:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e50:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e50:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e60:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e60:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e70:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e70:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e80:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e80:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15158, 237 lines modified | Offset 15158, 237 lines modified | ||
| 0003b350:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b350:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b360:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | 0003b360:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | ||
| 0003b370:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b370:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b380:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b380:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b390:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b390:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b3a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b3a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b3b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b3b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b3c0:·656d·6564·6961·7469·6f6e·20 | 0003b3c0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003b3d0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b3e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b3f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b400:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b410:·6d38·3430·3622·3e3c·7461·626c·6520·636c··m8406"><table·cl | |||
| 0003b420:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b3d0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b3e0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b3f0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b400:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b410:·646d·3834·3036·223e·3c74·6162·6c65·2063··dm8406"><table·c | |||
| 0003b420:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b430:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b4 | 0003b430:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b440:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b450:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b460:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b470:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b480:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b490:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b450:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b460:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b470:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b480:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b490:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b4a0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b4b0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b4c0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b4d0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b4e0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b4 | 0003b4a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b4b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b500:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b510:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b520:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b530:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b540:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b550:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b560:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b570:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b580:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b590:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b5a0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b5b0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b5c0:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b5d0:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b5e0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b5f0:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b600:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b610:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b620:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b630:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b640:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b650:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b660:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b670:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b680:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b690:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b6a0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b6b0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b6c0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b6d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b6e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b6f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b700:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b710:·6765·743d·2223·6964·6d38·3430·3722·2074··get="#idm8407"·t | |||
| 0003b720:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b730:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b740:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b750:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b760:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b770:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b780:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b790:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b7a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b7b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b7c0:·6964·3d22·6964·6d38·3430·3722·3e3c·7461··id="idm8407"><ta | |||
| 0003b7d0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b7e0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b7f0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b800:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b810:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b820:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b830:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b840:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b850:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b860:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b870:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b880:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b890:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b | 0003b4c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b4d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b4e0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b4f0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b500:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b510:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b520:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b530:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b540:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b550:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b560:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b8b0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b8c0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| Max diff block lines reached; 25164083/25196567 bytes (99.87%) of diff not shown. | |||
| Offset 14300, 15 lines modified | Offset 14300, 15 lines modified | ||
| 00037db0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037db0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037dc0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037dc0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037dd0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037dd0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037de0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037de0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037df0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037df0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e10:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037e10:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037e20:·2d31·312d·303 | 00037e20:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037e30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037e80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037e80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037e90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037e90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15127, 236 lines modified | Offset 15127, 236 lines modified | ||
| 0003b160:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | 0003b160:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | ||
| 0003b170:·3036·2220·7461·6269·6e64·6578·3d22·3022··06"·tabindex="0" | 0003b170:·3036·2220·7461·6269·6e64·6578·3d22·3022··06"·tabindex="0" | ||
| 0003b180:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b180:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b190:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b190:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b1a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b1a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b1b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b1b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b1c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b1c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b1d0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b1e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b1f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b200:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b210:·7073·6522·2069·643d·2269·646d·3834·3036··pse"·id="idm8406 | |||
| 0003b220:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b230:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b1d0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b1e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b1f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b200:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b210:·6170·7365·2220·6964·3d22·6964·6d38·3430··apse"·id="idm840 | |||
| 0003b220:·3622·3e3c·7461·626c·6520·636c·6173·733d··6"><table·class= | |||
| 0003b230:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b240:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b2 | 0003b240:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b250:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b260:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b270:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b280:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b290:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b2a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b2b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b2c0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b260:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b270:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b280:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b290:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b2a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b2b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b2c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b2d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b2e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b2f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b300:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b310:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b320:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b330:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b340:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b350:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b360:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b370:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b380:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b390:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b3a0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b3b0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b3c0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b3d0:·202d·2043·4345·2d39·3038·3433·2d34·0a20···-·CCE-90843-4.· | |||
| 0003b3e0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b3f0:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003b400:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003b410:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b420:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b430:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b440:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b450:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b460:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b470:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b480:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b490:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b4a0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b4b0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b4c0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b4d0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b4e0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b4f0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b500:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b510:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b520:·2369·646d·3834·3037·2220·7461·6269·6e64··#idm8407"·tabind | |||
| 0003b530:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b540:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b550:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b560:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b570:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b580:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003b590:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b5a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5d0:·646d·3834·3037·223e·3c74·6162·6c65·2063··dm8407"><table·c | |||
| 0003b5e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b5f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b600:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b610:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b620:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b630:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b640:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b650:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b660:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b670:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b680:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b690:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b6a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b | 0003b2d0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b2e0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b2f0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b300:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b310:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b320:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b330:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b340:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b350:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b360:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b370:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| Max diff block lines reached; 10735158/10767504 bytes (99.70%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 106, 54 lines modified | Offset 106, 26 lines modified | ||
| 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 109 | ·············_\x8c_\x8i_\x8s············6.1.1 | 109 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 118 | -·name:·Ensure·aide·is·installed | ||
| 119 | ··package: | ||
| 120 | ····name:·aide | ||
| 121 | ····state:·present | ||
| 122 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 123 | ··tags: | ||
| 124 | ··-·CCE-90843-4 | ||
| 125 | ··-·CJIS-5.10.1.3 | ||
| 126 | ··-·DISA-STIG-RHEL-09-651010 | ||
| 127 | ··-·NIST-800-53-CM-6(a) | ||
| 128 | ··-·PCI-DSS-Req-11.5 | ||
| 129 | ··-·PCI-DSSv4-11.5.2 | ||
| 130 | ··-·enable_strategy | ||
| 131 | ··-·low_complexity | ||
| 132 | ··-·low_disruption | ||
| 133 | ··-·medium_severity | ||
| 134 | ··-·no_reboot_needed | ||
| 135 | ··-·package_aide_installed | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 141 | include·install_aide | 118 | include·install_aide |
| 142 | class·install_aide·{ | 119 | class·install_aide·{ |
| 143 | ··package·{·'aide': | 120 | ··package·{·'aide': |
| 144 | ····ensure·=>·'installed', | 121 | ····ensure·=>·'installed', |
| 145 | ··} | 122 | ··} |
| 146 | } | 123 | } |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | [[packages]] | ||
| 149 | name·=·"aide" | ||
| 150 | version·=·"*" | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | #·Remediation·is·applicable·only·in·certain·platforms | 129 | #·Remediation·is·applicable·only·in·certain·platforms |
| 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 130 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 168, 21 lines modified | Offset 140, 49 lines modified | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | package·install·aide | 145 | package·install·aide |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 179 | package·--add=aide | 155 | package·--add=aide |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | -·name:·Ensure·aide·is·installed | ||
| 162 | ··package: | ||
| 163 | ····name:·aide | ||
| 164 | ····state:·present | ||
| 165 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 166 | ··tags: | ||
| 167 | ··-·CCE-90843-4 | ||
| 168 | ··-·CJIS-5.10.1.3 | ||
| 169 | ··-·DISA-STIG-RHEL-09-651010 | ||
| 170 | ··-·NIST-800-53-CM-6(a) | ||
| 171 | ··-·PCI-DSS-Req-11.5 | ||
| 172 | ··-·PCI-DSSv4-11.5.2 | ||
| 173 | ··-·enable_strategy | ||
| 174 | ··-·low_complexity | ||
| 175 | ··-·low_disruption | ||
| 176 | ··-·medium_severity | ||
| 177 | ··-·no_reboot_needed | ||
| 178 | ··-·package_aide_installed | ||
| 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 181 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 182 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 184 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 183 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 185 | To·initiate·a·manual·check,·run·the·following·command: | 184 | To·initiate·a·manual·check,·run·the·following·command: |
| 186 | $·sudo·/usr/sbin/aide·--check | 185 | $·sudo·/usr/sbin/aide·--check |
| Offset 202, 14 lines modified | Offset 202, 28 lines modified | ||
| 202 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 202 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 204 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 204 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 205 | ·············_\x8c_\x8i_\x8s············6.1.1 | 205 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 206 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 206 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 207 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 207 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| Max diff block lines reached; 1303066/1308752 bytes (99.57%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e30:·3230·3234·2d31·312d·303 | 00037e30:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15118, 237 lines modified | Offset 15118, 237 lines modified | ||
| 0003b0d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b0d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b0e0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | 0003b0e0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | ||
| 0003b0f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b0f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b100:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b100:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b110:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b110:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b120:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b120:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b130:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b130:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b140:·5265·6d65·6469·6174·696f·6e20· | 0003b140:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | ||
| 0003b150:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b160:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b170:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b180:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b190:·646d·3834·3036·223e·3c74·6162·6c65·2063··dm8406"><table·c | |||
| 0003b1a0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b150:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b160:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b170:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b180:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b190:·6964·6d38·3430·3622·3e3c·7461·626c·6520··idm8406"><table· | |||
| 0003b1a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b1b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b1 | 0003b1b0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b1c0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b1d0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b1e0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b1f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b200:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b210:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b1d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b1e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b1f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b200:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b210:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b220:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b230:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b240:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b250:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b260:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b2 | 0003b220:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b230:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b280:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b290:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b2a0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b2b0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b2c0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b2d0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b2e0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b2f0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b300:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b310:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b320:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b330:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b340:·6167·733a·0a20·202d·2043·4345·2d39·3038··ags:.··-·CCE-908 | |||
| 0003b350:·3433·2d34·0a20·202d·2043·4a49·532d·352e··43-4.··-·CJIS-5. | |||
| 0003b360:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b370:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003b380:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b390:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b3a0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b3b0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b3c0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b3d0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b3e0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b3f0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b400:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b410:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b420:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b430:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b440:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b450:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b460:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b470:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b480:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b490:·7267·6574·3d22·2369·646d·3834·3037·2220··rget="#idm8407"· | |||
| 0003b4a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b4b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b4c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b4d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b4e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b4f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b500:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b510:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b520:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b530:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b540:·2069·643d·2269·646d·3834·3037·223e·3c74···id="idm8407"><t | |||
| 0003b550:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b560:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b570:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b580:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b590:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b5a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b5b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b5c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b5d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b5e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b5f0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b600:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b610:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b | 0003b240:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b250:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b260:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b270:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b280:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b290:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003b2a0:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b2b0:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b2c0:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b2d0:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b2e0:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003b630:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b640:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| Max diff block lines reached; 10350381/10382865 bytes (99.69%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·- | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·- |
| 43 | ··············Workstation | 43 | ··············Workstation |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 105, 54 lines modified | Offset 105, 26 lines modified | ||
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | -·name:·Ensure·aide·is·installed | ||
| 118 | ··package: | ||
| 119 | ····name:·aide | ||
| 120 | ····state:·present | ||
| 121 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 122 | ··tags: | ||
| 123 | ··-·CCE-90843-4 | ||
| 124 | ··-·CJIS-5.10.1.3 | ||
| 125 | ··-·DISA-STIG-RHEL-09-651010 | ||
| 126 | ··-·NIST-800-53-CM-6(a) | ||
| 127 | ··-·PCI-DSS-Req-11.5 | ||
| 128 | ··-·PCI-DSSv4-11.5.2 | ||
| 129 | ··-·enable_strategy | ||
| 130 | ··-·low_complexity | ||
| 131 | ··-·low_disruption | ||
| 132 | ··-·medium_severity | ||
| 133 | ··-·no_reboot_needed | ||
| 134 | ··-·package_aide_installed | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | include·install_aide | 117 | include·install_aide |
| 141 | class·install_aide·{ | 118 | class·install_aide·{ |
| 142 | ··package·{·'aide': | 119 | ··package·{·'aide': |
| 143 | ····ensure·=>·'installed', | 120 | ····ensure·=>·'installed', |
| 144 | ··} | 121 | ··} |
| 145 | } | 122 | } |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | #·Remediation·is·applicable·only·in·certain·platforms | 128 | #·Remediation·is·applicable·only·in·certain·platforms |
| 156 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 129 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 21 lines modified | Offset 139, 49 lines modified | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | package·install·aide | 144 | package·install·aide |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | package·--add=aide | 154 | package·--add=aide |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | -·name:·Ensure·aide·is·installed | ||
| 161 | ··package: | ||
| 162 | ····name:·aide | ||
| 163 | ····state:·present | ||
| 164 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 165 | ··tags: | ||
| 166 | ··-·CCE-90843-4 | ||
| 167 | ··-·CJIS-5.10.1.3 | ||
| 168 | ··-·DISA-STIG-RHEL-09-651010 | ||
| 169 | ··-·NIST-800-53-CM-6(a) | ||
| 170 | ··-·PCI-DSS-Req-11.5 | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | ||
| 172 | ··-·enable_strategy | ||
| 173 | ··-·low_complexity | ||
| 174 | ··-·low_disruption | ||
| 175 | ··-·medium_severity | ||
| 176 | ··-·no_reboot_needed | ||
| 177 | ··-·package_aide_installed | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 180 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 183 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 182 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 184 | To·initiate·a·manual·check,·run·the·following·command: | 183 | To·initiate·a·manual·check,·run·the·following·command: |
| 185 | $·sudo·/usr/sbin/aide·--check | 184 | $·sudo·/usr/sbin/aide·--check |
| Offset 201, 14 lines modified | Offset 201, 28 lines modified | ||
| 201 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 201 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 202 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 202 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 203 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 203 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 204 | ·············_\x8c_\x8i_\x8s············6.1.1 | 204 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 205 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 205 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 206 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 206 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| Max diff block lines reached; 1248149/1253771 bytes (99.55%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e30:·3230·3234·2d31·312d·303 | 00037e30:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15150, 236 lines modified | Offset 15150, 236 lines modified | ||
| 0003b2d0:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | 0003b2d0:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | ||
| 0003b2e0:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | 0003b2e0:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003b2f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b2f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b300:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b300:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b310:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b310:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b320:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b320:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b330:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b330:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b340:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b350:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b360:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b370:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b380:·7365·2220·6964·3d22·6964·6d38·3430·3622··se"·id="idm8406" | |||
| 0003b390:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b3a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b340:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b350:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b360:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b370:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b380:·7073·6522·2069·643d·2269·646d·3834·3036··pse"·id="idm8406 | |||
| 0003b390:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b3a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b3b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b3 | 0003b3b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b3c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b3d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b3e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b3f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b400:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b410:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b420:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b430:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b3d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b3e0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b3f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b400:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b410:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b420:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b430:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b440:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b450:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b460:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b470:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b480:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b490:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b4a0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b4b0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b4c0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b4d0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b4e0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b4f0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b500:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b510:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b520:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b530:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b540:·2d20·4343·452d·3930·3834·332d·340a·2020··-·CCE-90843-4.·· | |||
| 0003b550:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b560:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003b570:·454c·2d30·392d·3635·3130·3130·0a20·202d··EL-09-651010.··- | |||
| 0003b580:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b590:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b5a0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b5b0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b5c0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b5d0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b5e0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b5f0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b600:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b610:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b620:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b630:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b640:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b650:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b660:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b670:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b680:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b690:·6964·6d38·3430·3722·2074·6162·696e·6465··idm8407"·tabinde | |||
| 0003b6a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b6b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b6c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b6d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b6e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b6f0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b700:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b710:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b720:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b730:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b740:·6d38·3430·3722·3e3c·7461·626c·6520·636c··m8407"><table·cl | |||
| 0003b750:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b760:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b770:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b780:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b790:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b7a0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b7b0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b7c0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b7d0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b7e0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b7f0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b800:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b810:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b | 0003b440:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b | 0003b450:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b460:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b470:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b480:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b490:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b | 0003b4a0:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | ||
| 0003b4b0:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b4c0:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b4d0:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b4e0:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| Max diff block lines reached; 24970981/25003327 bytes (99.87%) of diff not shown. | |||
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037fe0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037ff0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037ff0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038000:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038000:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038010:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038010:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038020:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038020:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038030:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038030:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038040:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038040:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038050:·206f·6620·3230·3234·2d31·312d·303 | 00038050:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00038060:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038060:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038070:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038070:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038080:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038080:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038090:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038090:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000380a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000380a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000380b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000380b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000380c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000380c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15103, 200 lines modified | Offset 15103, 200 lines modified | ||
| 0003afe0:·2d74·6172·6765·743d·2223·6964·6d38·3933··-target="#idm893 | 0003afe0:·2d74·6172·6765·743d·2223·6964·6d38·3933··-target="#idm893 | ||
| 0003aff0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 0003aff0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003b000:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b000:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b010:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b010:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b020:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b020:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b030:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b030:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b040:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b040:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b050:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003b060:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b070:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b080:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b090:·2220·6964·3d22·6964·6d38·3933·3122·3e3c··"·id="idm8931">< | |||
| 0003b0a0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003b0b0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003b0c0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| 0003b0d0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | |||
| 0003b0e0:·6966·2028·205b·2021·202d·6620·2f2e·646f··if·(·[·!·-f·/.do | |||
| 0003b0f0:·636b·6572·656e·7620·5d20·2661·6d70·3b26··ckerenv·]·&& | |||
| 0003b100:·616d·703b·205b·2021·202d·6620·2f72·756e··amp;·[·!·-f·/run | |||
| 0003b110:·2f2e·636f·6e74·6169·6e65·7265·6e76·205d··/.containerenv·] | |||
| 0003b120:·2026·616d·703b·2661·6d70·3b20·2120·2820···&&·!·(· | |||
| 0003b130:·5b20·2224·7b63·6f6e·7461·696e·6572·3a2d··[·"${container:- | |||
| 0003b140:·7d22·203d·3d20·2262·7772·6170·2d6f·7362··}"·==·"bwrap-osb | |||
| 0003b150:·7569·6c64·2220·5d20·2920·293b·2074·6865··uild"·]·)·);·the | |||
| 0003b160:·6e0a·0a66·6970·732d·6d6f·6465·2d73·6574··n..fips-mode-set | |||
| 0003b170:·7570·202d·2d65·6e61·626c·650a·4649·5053··up·--enable.FIPS | |||
| 0003b180:·5f43·4f4e·463d·222f·6574·632f·6472·6163··_CONF="/etc/drac | |||
| 0003b190:·7574·2e63·6f6e·662e·642f·3430·2d66·6970··ut.conf.d/40-fip | |||
| 0003b1a0:·732e·636f·6e66·220a·6966·2021·2067·7265··s.conf".if·!·gre | |||
| 0003b1b0:·7020·225e·6164·645f·6472·6163·7574·6d6f··p·"^add_dracutmo | |||
| 0003b1c0:·6475·6c65·732b·3d5c·2220·6669·7073·205c··dules+=\"·fips·\ | |||
| 0003b1d0:·2222·2024·4649·5053·5f43·4f4e·463b·2074··""·$FIPS_CONF;·t | |||
| 0003b1e0:·6865·6e0a·2020·2020·6563·686f·2022·6164··hen.····echo·"ad | |||
| 0003b1f0:·645f·6472·6163·7574·6d6f·6475·6c65·732b··d_dracutmodules+ | |||
| 0003b200:·3d5c·2220·6669·7073·205c·2222·2026·6774··=\"·fips·\""·> | |||
| 0003b210:·3b26·6774·3b20·2446·4950·535f·434f·4e46··;>·$FIPS_CONF | |||
| 0003b220:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | |||
| 0003b230:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | |||
| 0003b240:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | |||
| 0003b250:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | |||
| 0003b260:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | |||
| 0003b270:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | |||
| 0003b280:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b290:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b2a0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b2b0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b2c0:·6765·743d·2223·6964·6d38·3933·3222·2074··get="#idm8932"·t | |||
| 0003b2d0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b2e0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b2f0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b300:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b310:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b320:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b | 0003b330:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003b | 0003b340:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003b350:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003b360:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003b370:·2069·643d·2269·646d·3839·3332·223e·3c74···id="idm8932"><t | ||
| 0003b | 0003b380:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b | 0003b390:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b | 0003b3a0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b | 0003b3b0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b | 0003b3c0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b0f0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b100:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | |||
| 0003b110:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b | 0003b3d0:·7479·3a3c·2f74·683e·3c74·643e·6d65·6469··ty:</th><td>medi | ||
| 0003b | 0003b3e0:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003b3f0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b400:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | |||
| 0003b410:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b | 0003b420:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b150:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 0003b160:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b170:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003b | 0003b430:·7472·7565·3c2f·7464·3e3c·2f74·723e·3c74··true</td></tr><t | ||
| 0003b440:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b450:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003b460:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b | 0003b470:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003b | 0003b480:·616d·653a·2043·6865·636b·2074·6f20·7365··ame:·Check·to·se | ||
| 0003b | 0003b490:·6520·7468·6520·6375·7272·656e·7420·7374··e·the·current·st | ||
| 0003b | 0003b4a0:·6174·7573·206f·6620·4649·5053·206d·6f64··atus·of·FIPS·mod | ||
| 0003b | 0003b4b0:·650a·2020·636f·6d6d·616e·643a·202f·7573··e.··command:·/us | ||
| 0003b | 0003b4c0:·722f·6269·6e2f·6669·7073·2d6d·6f64·652d··r/bin/fips-mode- | ||
| 0003b | 0003b4d0:·7365·7475·7020·2d2d·6368·6563·6b0a·2020··setup·--check.·· | ||
| 0003b | 0003b4e0:·7265·6769·7374·6572·3a20·6973·5f66·6970··register:·is_fip | ||
| 0003b | 0003b4f0:·735f·656e·6162·6c65·640a·2020·6368·616e··s_enabled.··chan | ||
| 0003b | 0003b500:·6765·645f·7768·656e·3a20·6661·6c73·650a··ged_when:·false. | ||
| 0003b | 0003b510:·2020·6661·696c·6564·5f77·6865·6e3a·2066····failed_when:·f | ||
| 0003b | 0003b520:·616c·7365·0a20·2077·6865·6e3a·2028·2061··alse.··when:·(·a | ||
| 0003b | 0003b530:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 0003b | 0003b540:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | ||
| 0003b | 0003b550:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | ||
| 0003b | 0003b560:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | ||
| 0003b | 0003b570:·6f64·6d61·6e22·2c0a·2020·2020·2263·6f6e··odman",.····"con | ||
| 0003b | 0003b580:·7461·696e·6572·225d·2061·6e64·206e·6f74··tainer"]·and·not | ||
| 0003b | 0003b590:·2028·206c·6f6f·6b75·7028·2265·6e76·222c···(·lookup("env", | ||
| 0003b | 0003b5a0:·2022·636f·6e74·6169·6e65·7222·2920·3d3d···"container")·== | ||
| 0003b | 0003b5b0:·2022·6277·7261·702d·6f73·6275·696c·6422···"bwrap-osbuild" | ||
| 0003b | 0003b5c0:·2029·2029·0a20·2074·6167·733a·0a20·202d···)·).··tags:.··- | ||
| 0003b | 0003b5d0:·2043·4345·2d38·3635·3437·2d37·0a20·202d···CCE-86547-7.··- | ||
| 0003b | 0003b5e0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | ||
| 0003b | 0003b5f0:·3039·2d36·3731·3031·300a·2020·2d20·4e49··09-671010.··-·NI | ||
| 0003b600:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b | 0003b610:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b330:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 0003b | 0003b620:·332d·4941·2d37·0a20·202d·204e·4953·542d··3-IA-7.··-·NIST- | ||
| 0003b630:·3830·302d·3533·2d53·432d·3132·0a20·202d··800-53-SC-12.··- | |||
| 0003b | 0003b640:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | ||
| 0003b650:·3132·2832·290a·2020·2d20·4e49·5354·2d38··12(2).··-·NIST-8 | |||
| Max diff block lines reached; 6271305/6298683 bytes (99.57%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information |
| 51 | ··············Systems·and·Organizations·(NIST·800-171) | 51 | ··············Systems·and·Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:9 | 54 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 63 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 101, 14 lines modified | Offset 101, 27 lines modified | ||
| 101 | ·············_\x8i_\x8s_\x8m······1446 | 101 | ·············_\x8i_\x8s_\x8m······1446 |
| 102 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 102 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 103 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 103 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 110 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 111 | fips-mode-setup·--enable | ||
| 112 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 113 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 114 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 115 | fi | ||
| 116 | else | ||
| 117 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 118 | fi | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 113 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 124 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 114 | ··command:·/usr/bin/fips-mode-setup·--check | 125 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 172, 27 lines modified | Offset 185, 14 lines modified | ||
| 172 | ··-·NIST-800-53-SC-13 | 185 | ··-·NIST-800-53-SC-13 |
| 173 | ··-·enable_dracut_fips_module | 186 | ··-·enable_dracut_fips_module |
| 174 | ··-·high_severity | 187 | ··-·high_severity |
| 175 | ··-·medium_complexity | 188 | ··-·medium_complexity |
| 176 | ··-·medium_disruption | 189 | ··-·medium_disruption |
| 177 | ··-·reboot_required | 190 | ··-·reboot_required |
| 178 | ··-·restrict_strategy | 191 | ··-·restrict_strategy |
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 181 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 182 | fips-mode-setup·--enable | ||
| 183 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 184 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 185 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 186 | fi | ||
| 187 | else | ||
| 188 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 189 | fi | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | To·enable·FIPS·mode,·run·the·following·command: | 193 | To·enable·FIPS·mode,·run·the·following·command: |
| 192 | fips-mode-setup·--enable | 194 | fips-mode-setup·--enable |
| 193 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 195 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 194 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 196 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 195 | ····*·Creating·/etc/system-fips | 197 | ····*·Creating·/etc/system-fips |
| Offset 208, 14 lines modified | Offset 208, 45 lines modified | ||
| 208 | ·············_\x8i_\x8s_\x8m······1446 | 208 | ·············_\x8i_\x8s_\x8m······1446 |
| 209 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 209 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 210 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 210 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 211 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 211 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 212 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 212 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 213 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 213 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 217 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 218 | var_system_crypto_policy='FIPS' | ||
| 219 | fips-mode-setup·--enable | ||
| 220 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 221 | rc=$? | ||
| 222 | if·test·"$rc"·=·127;·then | ||
| 223 | » echo·"$stderr_of_call"·>&2 | ||
| 224 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 225 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 226 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 227 | » false··#·end·with·an·error·code | ||
| 228 | elif·test·"$rc"·!=·0;·then | ||
| 229 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 230 | » false··#·end·with·an·error·code | ||
| 231 | fi | ||
| 232 | else | ||
| 233 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 234 | fi | ||
| 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 236 | [customizations] | ||
| 237 | fips·=·true | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 220 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 243 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 221 | ··set_fact: | 244 | ··set_fact: |
| Offset 319, 45 lines modified | Offset 350, 14 lines modified | ||
| 319 | ··-·NIST-800-53-SC-13 | 350 | ··-·NIST-800-53-SC-13 |
| 320 | ··-·enable_fips_mode | 351 | ··-·enable_fips_mode |
| 321 | ··-·high_severity | 352 | ··-·high_severity |
| 322 | ··-·medium_complexity | 353 | ··-·medium_complexity |
| 323 | ··-·medium_disruption | 354 | ··-·medium_disruption |
| 324 | ··-·reboot_required | 355 | ··-·reboot_required |
| 325 | ··-·restrict_strategy | 356 | ··-·restrict_strategy |
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 893736/900767 bytes (99.22%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037dc0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037dd0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037dd0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037de0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037de0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037df0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037df0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e00:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e00:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e10:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e10:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e20:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e20:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e30:·3032·342d·3131·2d30·3 | 00037e30:·3032·342d·3131·2d30·3729·0a20·2020·2020··024-11-07).····· | ||
| 00037e40:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e40:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e50:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e50:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e60:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e60:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e70:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e70:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037e80:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037e80:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037e90:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037e90:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ea0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ea0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15183, 306 lines modified | Offset 15183, 306 lines modified | ||
| 0003b4e0:·7461·7267·6574·3d22·2369·646d·3830·3632··target="#idm8062 | 0003b4e0:·7461·7267·6574·3d22·2369·646d·3830·3632··target="#idm8062 | ||
| 0003b4f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b4f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b500:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b500:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b510:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b510:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b520:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b520:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b530:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b530:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b540:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b540:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b550:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b560:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b570:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b580:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b590:·2069·643d·2269·646d·3830·3632·223e·3c70···id="idm8062"><p | |||
| 0003b5a0:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003b5b0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003b5c0:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003b5d0:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003b5e0:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003b5f0:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003b600:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003b610:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003b620:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003b630:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | |||
| 0003b640:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | |||
| 0003b650:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | |||
| 0003b660:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | |||
| 0003b670:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | |||
| 0003b680:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | |||
| 0003b690:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003b6a0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | |||
| 0003b6b0:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | |||
| 0003b6c0:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | |||
| 0003b6d0:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | |||
| 0003b6e0:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | |||
| 0003b6f0:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | |||
| 0003b700:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | |||
| 0003b710:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | |||
| 0003b720:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | |||
| 0003b730:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | |||
| 0003b740:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | |||
| 0003b750:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | |||
| 0003b760:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | |||
| 0003b770:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | |||
| 0003b780:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | |||
| 0003b790:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | |||
| 0003b7a0:·2020·0a66·690a·3c2f·636f·6465·3e3c·2f70····.fi.</code></p | |||
| 0003b7b0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b7c0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b7d0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b7e0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b7f0:·7461·7267·6574·3d22·2369·646d·3830·3633··target="#idm8063 | |||
| 0003b800:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b810:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b820:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b830:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b840:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b850:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b | 0003b860:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003b | 0003b870:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003b | 0003b880:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b | 0003b890:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b | 0003b8a0:·7365·2220·6964·3d22·6964·6d38·3036·3322··se"·id="idm8063" | ||
| 0003b | 0003b8b0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003b | 0003b8c0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003b | 0003b8d0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b | 0003b8e0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b | 0003b8f0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003b | 0003b900:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003b | 0003b910:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003b | 0003b920:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b | 0003b930:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003b | 0003b940:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b950:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b | 0003b960:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b | 0003b970:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b | 0003b980:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003b | 0003b990:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003b | 0003b9a0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003b | 0003b9b0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003b | 0003b9c0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| 0003b | 0003b9d0:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | ||
| 0003b | 0003b9e0:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | ||
| 0003b | 0003b9f0:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | ||
| 0003b | 0003ba00:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | ||
| 0003b | 0003ba10:·6d64·3a20·646e·6620·7265·696e·7374·616c··md:·dnf·reinstal | ||
| 0003b | 0003ba20:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | ||
| 0003b | 0003ba30:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | ||
| 0003b | 0003ba40:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | ||
| 0003b | 0003ba50:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | ||
| 0003b | 0003ba60:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | ||
| 0003b | 0003ba70:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | ||
| 0003b | 0003ba80:·2043·4345·2d39·3038·3431·2d38·0a20·202d···CCE-90841-8.··- | ||
| 0003b | 0003ba90:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003b | 0003baa0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003bab0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003b | 0003bac0:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003b | 0003bad0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003b | 0003bae0:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003b | 0003baf0:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003b | 0003bb00:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b | 0003bb10:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003b | 0003bb20:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003b | 0003bb30:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003b | 0003bb40:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b | 0003bb50:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003b | 0003bb60:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003b | 0003bb70:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003b | 0003bb80:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003b | 0003bb90:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003b | 0003bba0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003b | 0003bbb0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003b | 0003bbc0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| Max diff block lines reached; 6571639/6613645 bytes (99.36%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 104, 14 lines modified | Offset 104, 27 lines modified | ||
| 104 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 104 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 105 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 105 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 112 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 113 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 114 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 115 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 116 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 117 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 118 | fi | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 116 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 124 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 117 | ··set_fact: | 125 | ··set_fact: |
| Offset 243, 27 lines modified | Offset 256, 14 lines modified | ||
| 243 | ··-·PCI-DSSv4-11.5.2 | 256 | ··-·PCI-DSSv4-11.5.2 |
| 244 | ··-·high_complexity | 257 | ··-·high_complexity |
| 245 | ··-·high_severity | 258 | ··-·high_severity |
| 246 | ··-·medium_disruption | 259 | ··-·medium_disruption |
| 247 | ··-·no_reboot_needed | 260 | ··-·no_reboot_needed |
| 248 | ··-·restrict_strategy | 261 | ··-·restrict_strategy |
| 249 | ··-·rpm_verify_hashes | 262 | ··-·rpm_verify_hashes |
| 250 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 251 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 252 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 253 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 254 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 255 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 256 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 257 | fi | ||
| 258 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 263 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 259 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 264 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 260 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 265 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 261 | run·the·following·command·to·determine·which·package·owns·it: | 266 | run·the·following·command·to·determine·which·package·owns·it: |
| 262 | $·rpm·-qf·FILENAME | 267 | $·rpm·-qf·FILENAME |
| 263 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 268 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 264 | $·sudo·rpm·--setugids·PACKAGENAME | 269 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 283, 14 lines modified | Offset 283, 40 lines modified | ||
| 283 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 283 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 284 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 284 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 285 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 285 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 286 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 286 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 287 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 287 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 288 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 288 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 289 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 289 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 291 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 292 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 293 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 294 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 295 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 296 | declare·-A·SETPERMS_RPM_DICT | ||
| 297 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 298 | #·is·expected·by·the·RPM·database | ||
| 299 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 300 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 301 | do | ||
| 302 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 303 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 304 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 305 | done | ||
| 306 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 307 | #·correct·values | ||
| 308 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 309 | do | ||
| 310 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 311 | done | ||
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 312 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 291 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 313 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 292 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 314 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 293 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 315 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 294 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 316 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 295 | -·name:·Read·list·of·files·with·incorrect·ownership | 317 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 296 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 318 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 368, 40 lines modified | Offset 394, 14 lines modified | ||
| 368 | ··-·PCI-DSSv4-11.5.2 | 394 | ··-·PCI-DSSv4-11.5.2 |
| 369 | ··-·high_complexity | 395 | ··-·high_complexity |
| 370 | ··-·high_severity | 396 | ··-·high_severity |
| 371 | ··-·medium_disruption | 397 | ··-·medium_disruption |
| 372 | ··-·no_reboot_needed | 398 | ··-·no_reboot_needed |
| 373 | ··-·restrict_strategy | 399 | ··-·restrict_strategy |
| 374 | ··-·rpm_verify_ownership | 400 | ··-·rpm_verify_ownership |
| 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 378 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 379 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 380 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 690870/698776 bytes (98.87%) of diff not shown. | |||
| Offset 14321, 15 lines modified | Offset 14321, 15 lines modified | ||
| 00037f00:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037f00:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037f10:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037f10:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037f20:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037f20:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037f30:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037f30:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037f40:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037f40:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037f50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f60:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037f60:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037f70:·3131·2d30·3 | 00037f70:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037f80:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037f80:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037f90:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037f90:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037fa0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037fa0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037fb0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037fb0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037fc0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037fc0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037fd0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037fd0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037fe0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037fe0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15204, 306 lines modified | Offset 15204, 306 lines modified | ||
| 0003b630:·7461·7267·6574·3d22·2369·646d·3830·3632··target="#idm8062 | 0003b630:·7461·7267·6574·3d22·2369·646d·3830·3632··target="#idm8062 | ||
| 0003b640:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b640:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b650:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b650:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b660:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b660:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b670:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b670:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b680:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b680:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b690:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b690:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b6a0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b6b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b6c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b6d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b6e0:·2069·643d·2269·646d·3830·3632·223e·3c70···id="idm8062"><p | |||
| 0003b6f0:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003b700:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003b710:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003b720:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003b730:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003b740:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003b750:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003b760:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003b770:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003b6a0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b6b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b6c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b6d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b6e0:·7365·2220·6964·3d22·6964·6d38·3036·3222··se"·id="idm8062" | |||
| 0003b6f0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b700:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b710:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b720:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b730:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b740:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | |||
| 0003b750:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | |||
| 0003b760:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b770:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0003b780:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b790:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b7a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b7b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b7c0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | |||
| 0003b7d0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | |||
| 0003b7e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b7f0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | |||
| 0003b800:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | |||
| 0003b810:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | |||
| 0003b820:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | |||
| 0003b830:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | |||
| 0003b840:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | |||
| 0003b850:·6d64·3a20·646e·6620·7265·696e·7374·616c··md:·dnf·reinstal | |||
| 0003b860:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | |||
| 0003b870:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | |||
| 0003b880:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | |||
| 0003b890:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | |||
| 0003b8a0:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | |||
| 0003b8b0:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | |||
| 0003b8c0:·2043·4345·2d39·3038·3431·2d38·0a20·202d···CCE-90841-8.··- | |||
| 0003b8d0:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | |||
| 0003b8e0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | |||
| 0003b8f0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | |||
| 0003b900:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | |||
| 0003b910:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | |||
| 0003b920:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | |||
| 0003b930:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | |||
| 0003b940:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b950:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | |||
| 0003b960:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | |||
| 0003b970:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | |||
| 0003b980:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b990:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | |||
| 0003b9a0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b9b0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b9c0:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | |||
| 0003b9d0:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | |||
| 0003b9e0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | |||
| 0003b9f0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | |||
| 0003ba00:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003ba10:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | |||
| 0003ba20:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | |||
| 0003ba30:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | |||
| 0003ba40:·0a0a·2d20·6e61·6d65·3a20·2753·6574·2066··..-·name:·'Set·f | |||
| 0003ba50:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | |||
| 0003ba60:·6167·6572·2072·6569·6e73·7461·6c6c·2063··ager·reinstall·c | |||
| 0003ba70:·6f6d·6d61·6e64·2028·7a79·7070·6572·2927··ommand·(zypper)' | |||
| 0003ba80:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | |||
| 0003ba90:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | |||
| 0003baa0:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | |||
| 0003bab0:·7a79·7070·6572·2069·6e20·2d66·202d·790a··zypper·in·-f·-y. | |||
| 0003bac0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003bad0:·6469·7374·7269·6275·7469·6f6e·203d·3d20··distribution·==· | |||
| 0003bae0:·2253·4c45·5322·0a20·2074·6167·733a·0a20··"SLES".··tags:.· | |||
| 0003baf0:·202d·2043·4345·2d39·3038·3431·2d38·0a20···-·CCE-90841-8.· | |||
| 0003bb00:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | |||
| 0003bb10:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | |||
| 0003bb20:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | |||
| 0003bb30:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | |||
| 0003bb40:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | |||
| 0003bb50:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | |||
| 0003bb60:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | |||
| 0003bb70:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003bb80:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | |||
| 0003bb90:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | |||
| 0003bba0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | |||
| 0003bbb0:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | |||
| 0003bbc0:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | |||
| 0003bbd0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003bbe0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003bbf0:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | |||
| 0003bc00:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | |||
| 0003bc10:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | |||
| 0003bc20:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | |||
| 0003bc30:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | |||
| Max diff block lines reached; 17123540/17165546 bytes (99.76%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:9 | 50 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 109, 14 lines modified | Offset 109, 27 lines modified | ||
| 109 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 109 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 110 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 110 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 111 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 118 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 119 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 120 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 121 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 122 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 123 | fi | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 121 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 129 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 122 | ··set_fact: | 130 | ··set_fact: |
| Offset 248, 27 lines modified | Offset 261, 14 lines modified | ||
| 248 | ··-·PCI-DSSv4-11.5.2 | 261 | ··-·PCI-DSSv4-11.5.2 |
| 249 | ··-·high_complexity | 262 | ··-·high_complexity |
| 250 | ··-·high_severity | 263 | ··-·high_severity |
| 251 | ··-·medium_disruption | 264 | ··-·medium_disruption |
| 252 | ··-·no_reboot_needed | 265 | ··-·no_reboot_needed |
| 253 | ··-·restrict_strategy | 266 | ··-·restrict_strategy |
| 254 | ··-·rpm_verify_hashes | 267 | ··-·rpm_verify_hashes |
| 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 256 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 257 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 258 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 259 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 260 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 261 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 262 | fi | ||
| 263 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 268 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 264 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 269 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 265 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 270 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 266 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 271 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 267 | $·rpm·-qf·FILENAME | 272 | $·rpm·-qf·FILENAME |
| 268 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 273 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 290, 14 lines modified | Offset 290, 44 lines modified | ||
| 290 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 290 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 291 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 291 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 292 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 292 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 293 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 293 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 294 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 294 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 295 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 295 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 296 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 296 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 302 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 303 | declare·-A·SETPERMS_RPM_DICT | ||
| 304 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 305 | #·is·expected·by·the·RPM·database | ||
| 306 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 307 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 308 | do | ||
| 309 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 310 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 311 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 312 | ········do | ||
| 313 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 314 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 315 | ········done | ||
| 316 | done | ||
| 317 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 318 | #·correct·values | ||
| 319 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 320 | do | ||
| 321 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 322 | done | ||
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 302 | -·name:·Read·list·of·files·with·incorrect·permissions | 328 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 303 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 329 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 378, 44 lines modified | Offset 408, 14 lines modified | ||
| 378 | ··-·PCI-DSSv4-11.5.2 | 408 | ··-·PCI-DSSv4-11.5.2 |
| 379 | ··-·high_complexity | 409 | ··-·high_complexity |
| 380 | ··-·high_severity | 410 | ··-·high_severity |
| 381 | ··-·medium_disruption | 411 | ··-·medium_disruption |
| 382 | ··-·no_reboot_needed | 412 | ··-·no_reboot_needed |
| 383 | ··-·restrict_strategy | 413 | ··-·restrict_strategy |
| 384 | ··-·rpm_verify_permissions | 414 | ··-·rpm_verify_permissions |
| 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1270681/1278978 bytes (99.35%) of diff not shown. | |||
| Offset 14314, 15 lines modified | Offset 14314, 15 lines modified | ||
| 00037e90:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037e90:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ea0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ea0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037eb0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037eb0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037ec0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037ec0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037ed0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037ed0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ef0:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037ef0:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037f00:·3131·2d30·3 | 00037f00:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037f10:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037f10:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037f20:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037f20:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037f30:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037f30:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037f40:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037f40:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037f50:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037f50:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037f60:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037f60:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037f70:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037f70:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15217, 306 lines modified | Offset 15217, 306 lines modified | ||
| 0003b700:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b700:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b710:·6d38·3036·3222·2074·6162·696e·6465·783d··m8062"·tabindex= | 0003b710:·6d38·3036·3222·2074·6162·696e·6465·783d··m8062"·tabindex= | ||
| 0003b720:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b720:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b730:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b730:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b740:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b740:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b750:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b750:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b760:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b760:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b770:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b780:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b790:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b7a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b7b0:·6170·7365·2220·6964·3d22·6964·6d38·3036··apse"·id="idm806 | |||
| 0003b7c0:·3222·3e3c·7072·653e·3c63·6f64·653e·0a23··2"><pre><code>.# | |||
| 0003b7d0:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | |||
| 0003b7e0:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | |||
| 0003b7f0:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | |||
| 0003b800:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | |||
| 0003b810:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | |||
| 0003b820:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | |||
| 0003b830:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | |||
| 0003b840:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | |||
| 0003b850:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b860:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | |||
| 0003b870:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | |||
| 0003b880:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | |||
| 0003b890:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | |||
| 0003b8a0:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | |||
| 0003b8b0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | |||
| 0003b8c0:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | |||
| 0003b8d0:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | |||
| 0003b8e0:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | |||
| 0003b8f0:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | |||
| 0003b900:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | |||
| 0003b910:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | |||
| 0003b920:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | |||
| 0003b930:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | |||
| 0003b940:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | |||
| 0003b950:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | |||
| 0003b960:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | |||
| 0003b970:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | |||
| 0003b980:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | |||
| 0003b990:·0a0a·2020·2020·0a20·2020·2064·6e66·2072··..····.····dnf·r | |||
| 0003b9a0:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | |||
| 0003b9b0:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | |||
| 0003b9c0:·6c6c·0a20·2020·200a·6669·0a3c·2f63·6f64··ll.····.fi.</cod | |||
| 0003b9d0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b9e0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b9f0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ba00:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003ba10:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003ba20:·6d38·3036·3322·2074·6162·696e·6465·783d··m8063"·tabindex= | |||
| 0003ba30:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003ba40:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003ba50:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003ba60:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003ba70:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b | 0003ba80:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b | 0003ba90:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b | 0003baa0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b | 0003bab0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b | 0003bac0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b | 0003bad0:·3830·3633·223e·3c74·6162·6c65·2063·6c61··8063"><table·cla | ||
| 0003b | 0003bae0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b | 0003baf0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b | 0003bb00:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b | 0003bb10:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b | 0003bb20:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b | 0003bb30:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b | 0003bb40:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b | 0003bb50:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b | 0003bb60:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b | 0003bb70:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003bb80:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b | 0003bb90:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003bba0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b | 0003bbb0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b | 0003bbc0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b | 0003bbd0:·6f64·653e·2d20·6e61·6d65·3a20·2753·6574··ode>-·name:·'Set | ||
| 0003b | 0003bbe0:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| 0003b | 0003bbf0:·616e·6167·6572·2072·6569·6e73·7461·6c6c··anager·reinstall | ||
| 0003b | 0003bc00:·2063·6f6d·6d61·6e64·270a·2020·7365·745f···command'.··set_ | ||
| 0003b | 0003bc10:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | ||
| 0003b | 0003bc20:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | ||
| 0003b | 0003bc30:·616c·6c5f·636d·643a·2064·6e66·2072·6569··all_cmd:·dnf·rei | ||
| 0003b | 0003bc40:·6e73·7461·6c6c·202d·790a·2020·7768·656e··nstall·-y.··when | ||
| 0003b | 0003bc50:·3a20·616e·7369·626c·655f·6469·7374·7269··:·ansible_distri | ||
| 0003b | 0003bc60:·6275·7469·6f6e·2069·6e20·5b20·2246·6564··bution·in·[·"Fed | ||
| 0003b | 0003bc70:·6f72·6122·2c20·2252·6564·4861·7422·2c20··ora",·"RedHat",· | ||
| 0003b | 0003bc80:·2243·656e·744f·5322·2c20·224f·7261·636c··"CentOS",·"Oracl | ||
| 0003b | 0003bc90:·654c·696e·7578·2220·5d0a·2020·7461·6773··eLinux"·].··tags | ||
| 0003b | 0003bca0:·3a0a·2020·2d20·4343·452d·3930·3834·312d··:.··-·CCE-90841- | ||
| 0003b | 0003bcb0:·380a·2020·2d20·434a·4953·2d35·2e31·302e··8.··-·CJIS-5.10. | ||
| 0003b9b0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | |||
| 0003b9c0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | |||
| 0003b9d0:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | |||
| 0003b9e0:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | |||
| 0003b9f0:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | |||
| 0003ba00:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | |||
| 0003ba10:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003ba20:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | |||
| 0003ba30:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | |||
| 0003ba40:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003ba50:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | |||
| 0003ba60:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | |||
| 0003ba70:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003ba80:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003ba90:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | |||
| 0003baa0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | |||
| 0003bab0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | |||
| 0003bac0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | |||
| 0003bad0:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | |||
| Max diff block lines reached; 9977820/10019826 bytes (99.58%) of diff not shown. | |||
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux:9 | 48 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 14 lines modified | Offset 111, 27 lines modified | ||
| 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 131 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 124 | ··set_fact: | 132 | ··set_fact: |
| Offset 250, 27 lines modified | Offset 263, 14 lines modified | ||
| 250 | ··-·PCI-DSSv4-11.5.2 | 263 | ··-·PCI-DSSv4-11.5.2 |
| 251 | ··-·high_complexity | 264 | ··-·high_complexity |
| 252 | ··-·high_severity | 265 | ··-·high_severity |
| 253 | ··-·medium_disruption | 266 | ··-·medium_disruption |
| 254 | ··-·no_reboot_needed | 267 | ··-·no_reboot_needed |
| 255 | ··-·restrict_strategy | 268 | ··-·restrict_strategy |
| 256 | ··-·rpm_verify_hashes | 269 | ··-·rpm_verify_hashes |
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 258 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 259 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 260 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 261 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 262 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 263 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 264 | fi | ||
| 265 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 266 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 271 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 267 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 272 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 268 | run·the·following·command·to·determine·which·package·owns·it: | 273 | run·the·following·command·to·determine·which·package·owns·it: |
| 269 | $·rpm·-qf·FILENAME | 274 | $·rpm·-qf·FILENAME |
| 270 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 271 | $·sudo·rpm·--setugids·PACKAGENAME | 276 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 290, 14 lines modified | Offset 290, 40 lines modified | ||
| 290 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 290 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 291 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 291 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 292 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 292 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 293 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 293 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 294 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 294 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 295 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 295 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 296 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 296 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 302 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 303 | declare·-A·SETPERMS_RPM_DICT | ||
| 304 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 305 | #·is·expected·by·the·RPM·database | ||
| 306 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 307 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 308 | do | ||
| 309 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 310 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 311 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 312 | done | ||
| 313 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 314 | #·correct·values | ||
| 315 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 316 | do | ||
| 317 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 318 | done | ||
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 320 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 321 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 322 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 323 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 302 | -·name:·Read·list·of·files·with·incorrect·ownership | 324 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 303 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 325 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 375, 40 lines modified | Offset 401, 14 lines modified | ||
| 375 | ··-·PCI-DSSv4-11.5.2 | 401 | ··-·PCI-DSSv4-11.5.2 |
| 376 | ··-·high_complexity | 402 | ··-·high_complexity |
| 377 | ··-·high_severity | 403 | ··-·high_severity |
| 378 | ··-·medium_disruption | 404 | ··-·medium_disruption |
| 379 | ··-·no_reboot_needed | 405 | ··-·no_reboot_needed |
| 380 | ··-·restrict_strategy | 406 | ··-·restrict_strategy |
| 381 | ··-·rpm_verify_ownership | 407 | ··-·rpm_verify_ownership |
| 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 383 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 384 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 385 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 386 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 387 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1016495/1024401 bytes (99.23%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037e50:·3131·2d30·3 | 00037e50:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15070, 200 lines modified | Offset 15070, 200 lines modified | ||
| 0003add0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003add0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003ade0:·2369·646d·3839·3331·2220·7461·6269·6e64··#idm8931"·tabind | 0003ade0:·2369·646d·3839·3331·2220·7461·6269·6e64··#idm8931"·tabind | ||
| 0003adf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003adf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003ae00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003ae00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003ae10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003ae10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003ae20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003ae20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003ae30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003ae30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003ae40:·5265·6d65·6469·6174·696f·6e20· | 0003ae40:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003ae50:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003ae60:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ae70:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ae80:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ae90:·3839·3331·223e·3c70·7265·3e3c·636f·6465··8931"><pre><code | |||
| 0003aea0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003aeb0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003aec0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003aed0:·7466·6f72·6d73·0a69·6620·2820·5b20·2120··tforms.if·(·[·!· | |||
| 0003aee0:·2d66·202f·2e64·6f63·6b65·7265·6e76·205d··-f·/.dockerenv·] | |||
| 0003aef0:·2026·616d·703b·2661·6d70·3b20·5b20·2120···&&·[·!· | |||
| 0003af00:·2d66·202f·7275·6e2f·2e63·6f6e·7461·696e··-f·/run/.contain | |||
| 0003af10:·6572·656e·7620·5d20·2661·6d70·3b26·616d··erenv·]·&&am | |||
| 0003af20:·703b·2021·2028·205b·2022·247b·636f·6e74··p;·!·(·[·"${cont | |||
| 0003af30:·6169·6e65·723a·2d7d·2220·3d3d·2022·6277··ainer:-}"·==·"bw | |||
| 0003af40:·7261·702d·6f73·6275·696c·6422·205d·2029··rap-osbuild"·]·) | |||
| 0003af50:·2029·3b20·7468·656e·0a0a·6669·7073·2d6d···);·then..fips-m | |||
| 0003af60:·6f64·652d·7365·7475·7020·2d2d·656e·6162··ode-setup·--enab | |||
| 0003af70:·6c65·0a46·4950·535f·434f·4e46·3d22·2f65··le.FIPS_CONF="/e | |||
| 0003af80:·7463·2f64·7261·6375·742e·636f·6e66·2e64··tc/dracut.conf.d | |||
| 0003af90:·2f34·302d·6669·7073·2e63·6f6e·6622·0a69··/40-fips.conf".i | |||
| 0003afa0:·6620·2120·6772·6570·2022·5e61·6464·5f64··f·!·grep·"^add_d | |||
| 0003afb0:·7261·6375·746d·6f64·756c·6573·2b3d·5c22··racutmodules+=\" | |||
| 0003afc0:·2066·6970·7320·5c22·2220·2446·4950·535f···fips·\""·$FIPS_ | |||
| 0003afd0:·434f·4e46·3b20·7468·656e·0a20·2020·2065··CONF;·then.····e | |||
| 0003afe0:·6368·6f20·2261·6464·5f64·7261·6375·746d··cho·"add_dracutm | |||
| 0003aff0:·6f64·756c·6573·2b3d·5c22·2066·6970·7320··odules+=\"·fips· | |||
| 0003b000:·5c22·2220·2667·743b·2667·743b·2024·4649··\""·>>·$FI | |||
| 0003b010:·5053·5f43·4f4e·460a·6669·0a0a·656c·7365··PS_CONF.fi..else | |||
| 0003b020:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003b030:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003b040:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003b050:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003b060:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003b070:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b080:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b090:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b0a0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b0b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b0c0:·3839·3332·2220·7461·6269·6e64·6578·3d22··8932"·tabindex=" | |||
| 0003b0d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b0e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b0f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b100:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b110:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b120:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003 | 0003b130:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003ae60:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003 | 0003b140:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b150:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003 | 0003b160:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | ||
| 0003ae90:·6964·6d38·3933·3122·3e3c·7461·626c·6520··idm8931"><table· | |||
| 0003 | 0003b170:·3933·3222·3e3c·7461·626c·6520·636c·6173··932"><table·clas | ||
| 0003b180:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003 | 0003b190:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003 | 0003b1a0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b1b0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b1c0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003aed0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003aee0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003aef0:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | |||
| 0003af00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003af10:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003 | 0003b1d0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003 | 0003b1e0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b1f0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0003b200:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0003b210:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b220:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0003b230:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003 | 0003b240:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b250:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b260:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b270:·6f64·653e·2d20·6e61·6d65·3a20·4368·6563··ode>-·name:·Chec | |||
| 0003b280:·6b20·746f·2073·6565·2074·6865·2063·7572··k·to·see·the·cur | |||
| 0003af50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003af60:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003af70:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003af80:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003af90:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003afa0:·4368·6563·6b20·746f·2073·6565·2074·6865··Check·to·see·the | |||
| 0003 | 0003b290:·7265·6e74·2073·7461·7475·7320·6f66·2046··rent·status·of·F | ||
| 0003 | 0003b2a0:·4950·5320·6d6f·6465·0a20·2063·6f6d·6d61··IPS·mode.··comma | ||
| 0003afd0:·6f6d·6d61·6e64·3a20·2f75·7372·2f62·696e··ommand:·/usr/bin | |||
| 0003 | 0003b2b0:·6e64·3a20·2f75·7372·2f62·696e·2f66·6970··nd:·/usr/bin/fip | ||
| 0003b2c0:·732d·6d6f·6465·2d73·6574·7570·202d·2d63··s-mode-setup·--c | |||
| 0003 | 0003b2d0:·6865·636b·0a20·2072·6567·6973·7465·723a··heck.··register: | ||
| 0003b000:·7465·723a·2069·735f·6669·7073·5f65·6e61··ter:·is_fips_ena | |||
| 0003b010:·626c·6564·0a20·2063·6861·6e67·6564·5f77··bled.··changed_w | |||
| 0003b020:·6865·6e3a·2066·616c·7365·0a20·2066·6169··hen:·false.··fai | |||
| 0003b030:·6c65·645f·7768·656e·3a20·6661·6c73·650a··led_when:·false. | |||
| 0003b040:·2020·7768·656e·3a20·2820·616e·7369·626c····when:·(·ansibl | |||
| 0003b050:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b060:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b070:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b080:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b090:·222c·0a20·2020·2022·636f·6e74·6169·6e65··",.····"containe | |||
| 0003b0a0:·7222·5d20·616e·6420·6e6f·7420·2820·6c6f··r"]·and·not·(·lo | |||
| 0003b0b0:·6f6b·7570·2822·656e·7622·2c20·2263·6f6e··okup("env",·"con | |||
| 0003b0c0:·7461·696e·6572·2229·203d·3d20·2262·7772··tainer")·==·"bwr | |||
| 0003b0d0:·6170·2d6f·7362·7569·6c64·2220·2920·290a··ap-osbuild"·)·). | |||
| 0003b0e0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b0f0:·3836·3534·372d·370a·2020·2d20·4449·5341··86547-7.··-·DISA | |||
| Max diff block lines reached; 6277929/6297579 bytes (99.69%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 92, 14 lines modified | Offset 92, 27 lines modified | ||
| 92 | ·············_\x8i_\x8s_\x8m······1446 | 92 | ·············_\x8i_\x8s_\x8m······1446 |
| 93 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 93 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 94 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 94 | References:··_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 95 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 95 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 96 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 96 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 97 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 97 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 98 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 98 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 100 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 101 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 102 | fips-mode-setup·--enable | ||
| 103 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 104 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 105 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 106 | fi | ||
| 107 | else | ||
| 108 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 109 | fi | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 104 | -·name:·Check·to·see·the·current·status·of·FIPS·mode | 115 | -·name:·Check·to·see·the·current·status·of·FIPS·mode |
| 105 | ··command:·/usr/bin/fips-mode-setup·--check | 116 | ··command:·/usr/bin/fips-mode-setup·--check |
| Offset 163, 27 lines modified | Offset 176, 14 lines modified | ||
| 163 | ··-·NIST-800-53-SC-13 | 176 | ··-·NIST-800-53-SC-13 |
| 164 | ··-·enable_dracut_fips_module | 177 | ··-·enable_dracut_fips_module |
| 165 | ··-·high_severity | 178 | ··-·high_severity |
| 166 | ··-·medium_complexity | 179 | ··-·medium_complexity |
| 167 | ··-·medium_disruption | 180 | ··-·medium_disruption |
| 168 | ··-·reboot_required | 181 | ··-·reboot_required |
| 169 | ··-·restrict_strategy | 182 | ··-·restrict_strategy |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 171 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 172 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·);·then | ||
| 173 | fips-mode-setup·--enable | ||
| 174 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 175 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 176 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 177 | fi | ||
| 178 | else | ||
| 179 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 180 | fi | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | To·enable·FIPS·mode,·run·the·following·command: | 184 | To·enable·FIPS·mode,·run·the·following·command: |
| 183 | fips-mode-setup·--enable | 185 | fips-mode-setup·--enable |
| 184 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 186 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 185 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 187 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 186 | ····*·Creating·/etc/system-fips | 188 | ····*·Creating·/etc/system-fips |
| Offset 199, 14 lines modified | Offset 199, 45 lines modified | ||
| 199 | ·············_\x8i_\x8s_\x8m······1446 | 199 | ·············_\x8i_\x8s_\x8m······1446 |
| 200 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 200 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 201 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 201 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 202 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 202 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 204 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 204 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 205 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 205 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 207 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 208 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 209 | var_system_crypto_policy='FIPS:OSPP' | ||
| 210 | fips-mode-setup·--enable | ||
| 211 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 212 | rc=$? | ||
| 213 | if·test·"$rc"·=·127;·then | ||
| 214 | » echo·"$stderr_of_call"·>&2 | ||
| 215 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 216 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 217 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 218 | » false··#·end·with·an·error·code | ||
| 219 | elif·test·"$rc"·!=·0;·then | ||
| 220 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 221 | » false··#·end·with·an·error·code | ||
| 222 | fi | ||
| 223 | else | ||
| 224 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 225 | fi | ||
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 227 | [customizations] | ||
| 228 | fips·=·true | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 211 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 234 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 212 | ··set_fact: | 235 | ··set_fact: |
| Offset 310, 45 lines modified | Offset 341, 14 lines modified | ||
| 310 | ··-·NIST-800-53-SC-13 | 341 | ··-·NIST-800-53-SC-13 |
| 311 | ··-·enable_fips_mode | 342 | ··-·enable_fips_mode |
| 312 | ··-·high_severity | 343 | ··-·high_severity |
| 313 | ··-·medium_complexity | 344 | ··-·medium_complexity |
| 314 | ··-·medium_disruption | 345 | ··-·medium_disruption |
| 315 | ··-·reboot_required | 346 | ··-·reboot_required |
| 316 | ··-·restrict_strategy | 347 | ··-·restrict_strategy |
| 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 893756/900826 bytes (99.22%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037dd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037de0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037de0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037df0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037df0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037e00:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037e00:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037e10:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037e10:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037e20:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037e20:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037e30:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037e30:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037e40:·2032·3032·342d·3131·2d30·3 | 00037e40:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037e50:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037e60:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037e60:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e70:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e70:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e80:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e80:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e90:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e90:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037ea0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037ea0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037eb0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037eb0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15209, 306 lines modified | Offset 15209, 306 lines modified | ||
| 0003b680:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b680:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b690:·2223·6964·6d38·3036·3222·2074·6162·696e··"#idm8062"·tabin | 0003b690:·2223·6964·6d38·3036·3222·2074·6162·696e··"#idm8062"·tabin | ||
| 0003b6a0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b6a0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b6b0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b6b0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b6c0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b6c0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b6d0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b6d0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b6e0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b6e0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b6f0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b700:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b710:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b720:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b730:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b740:·6d38·3036·3222·3e3c·7072·653e·3c63·6f64··m8062"><pre><cod | |||
| 0003b750:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003b760:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003b770:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003b780:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003b790:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003b7a0:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003b7b0:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003b7c0:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003b7d0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b7e0:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003b7f0:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003b800:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003b810:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003b820:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003b830:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b840:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003b850:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003b860:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003b870:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003b880:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003b890:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003b8a0:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003b8b0:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003b8c0:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003b8d0:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003b8e0:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003b8f0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b900:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003b910:·2027·2922·0a0a·2020·2020·0a20·2020·2064···')"..····.····d | |||
| 0003b920:·6e66·2072·6569·6e73·7461·6c6c·202d·7920··nf·reinstall·-y· | |||
| 0003b930:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003b940:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003b950:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b960:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b970:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b980:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b990:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b9a0:·2223·6964·6d38·3036·3322·2074·6162·696e··"#idm8063"·tabin | |||
| 0003b9b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b9c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b9d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b9e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b9f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b | 0003ba00:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b | 0003ba10:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b | 0003ba20:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003ba30:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003ba40:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003ba50:·2269·646d·3830·3633·223e·3c74·6162·6c65··"idm8063"><table | ||
| 0003b | 0003ba60:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003ba70:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003ba80:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003ba90:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003baa0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003bab0:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003bac0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003bad0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003bae0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003baf0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003bb00:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003bb10:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003bb20:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003bb30:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b | 0003bb40:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b | 0003bb50:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b | 0003bb60:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b | 0003bb70:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b | 0003bb80:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b | 0003bb90:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b | 0003bba0:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b | 0003bbb0:·696e·7374·616c·6c5f·636d·643a·2064·6e66··install_cmd:·dnf | ||
| 0003b | 0003bbc0:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b | 0003bbd0:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003b | 0003bbe0:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b | 0003bbf0:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b | 0003bc00:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b | 0003bc10:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b | 0003bc20:·7461·6773·3a0a·2020·2d20·4343·452d·3930··tags:.··-·CCE-90 | ||
| 0003b | 0003bc30:·3834·312d·380a·2020·2d20·434a·4953·2d35··841-8.··-·CJIS-5 | ||
| 0003b | 0003bc40:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b | 0003bc50:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b | 0003bc60:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003bc70:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b | 0003bc80:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b | 0003bc90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b | 0003bca0:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b | 0003bcb0:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b | 0003bcc0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003bcd0:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b | 0003bce0:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b | 0003bcf0:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b | 0003bd00:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b | 0003bd10:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b | 0003bd20:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b | 0003bd30:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b | 0003bd40:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b | 0003bd50:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b | 0003bd60:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| Max diff block lines reached; 17228543/17270549 bytes (99.76%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 110, 14 lines modified | Offset 110, 27 lines modified | ||
| 110 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 110 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 111 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 111 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 112 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 112 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 113 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 113 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 118 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 119 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 120 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 121 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 122 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 123 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 124 | fi | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 122 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 130 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 123 | ··set_fact: | 131 | ··set_fact: |
| Offset 249, 27 lines modified | Offset 262, 14 lines modified | ||
| 249 | ··-·PCI-DSSv4-11.5.2 | 262 | ··-·PCI-DSSv4-11.5.2 |
| 250 | ··-·high_complexity | 263 | ··-·high_complexity |
| 251 | ··-·high_severity | 264 | ··-·high_severity |
| 252 | ··-·medium_disruption | 265 | ··-·medium_disruption |
| 253 | ··-·no_reboot_needed | 266 | ··-·no_reboot_needed |
| 254 | ··-·restrict_strategy | 267 | ··-·restrict_strategy |
| 255 | ··-·rpm_verify_hashes | 268 | ··-·rpm_verify_hashes |
| 256 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 257 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 258 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 259 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 260 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 261 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 262 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 263 | fi | ||
| 264 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 269 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 265 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 270 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 266 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 271 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 267 | run·the·following·command·to·determine·which·package·owns·it: | 272 | run·the·following·command·to·determine·which·package·owns·it: |
| 268 | $·rpm·-qf·FILENAME | 273 | $·rpm·-qf·FILENAME |
| 269 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 274 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 270 | $·sudo·rpm·--setugids·PACKAGENAME | 275 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 289, 14 lines modified | Offset 289, 40 lines modified | ||
| 289 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 289 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 290 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 290 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 291 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 291 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 292 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 292 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 293 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 293 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 294 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 294 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 295 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 295 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 298 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 299 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 300 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 301 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 302 | declare·-A·SETPERMS_RPM_DICT | ||
| 303 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 304 | #·is·expected·by·the·RPM·database | ||
| 305 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 306 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 307 | do | ||
| 308 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 309 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 310 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 311 | done | ||
| 312 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 313 | #·correct·values | ||
| 314 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 315 | do | ||
| 316 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 317 | done | ||
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 297 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 319 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 298 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 320 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 299 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 321 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 300 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 322 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 301 | -·name:·Read·list·of·files·with·incorrect·ownership | 323 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 302 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 324 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 374, 40 lines modified | Offset 400, 14 lines modified | ||
| 374 | ··-·PCI-DSSv4-11.5.2 | 400 | ··-·PCI-DSSv4-11.5.2 |
| 375 | ··-·high_complexity | 401 | ··-·high_complexity |
| 376 | ··-·high_severity | 402 | ··-·high_severity |
| 377 | ··-·medium_disruption | 403 | ··-·medium_disruption |
| 378 | ··-·no_reboot_needed | 404 | ··-·no_reboot_needed |
| 379 | ··-·restrict_strategy | 405 | ··-·restrict_strategy |
| 380 | ··-·rpm_verify_ownership | 406 | ··-·rpm_verify_ownership |
| 381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 382 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 383 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 384 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 385 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 386 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1660575/1668371 bytes (99.53%) of diff not shown. | |||
| Offset 14311, 15 lines modified | Offset 14311, 15 lines modified | ||
| 00037e60:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037e60:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037e70:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037e70:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037e80:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037e80:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037e90:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037e90:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037ea0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037ea0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037eb0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037eb0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037ed0:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00037ed0:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037ef0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f00:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f00:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037f10:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037f10:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037f20:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037f20:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037f30:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037f30:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037f40:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037f40:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15153, 237 lines modified | Offset 15153, 237 lines modified | ||
| 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b310:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | 0003b310:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | ||
| 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b370:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b370:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | ||
| 0003b380:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b390:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b3a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b3b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b3c0:·2269·646d·3834·3036·223e·3c74·6162·6c65··"idm8406"><table | |||
| 0003b3d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b380:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b390:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b3a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b3b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b3c0:·3d22·6964·6d38·3430·3622·3e3c·7461·626c··="idm8406"><tabl | |||
| 0003b3d0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b3e0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b3 | 0003b3e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b400:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b410:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b420:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b430:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b | 0003b3f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b400:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b410:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b420:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b430:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b440:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b450:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b460:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b470:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b480:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b490:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b4 | 0003b4a0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003b4b0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b4c0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b4d0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b4e0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b4f0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b500:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b510:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b460:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b470:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b480:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b490:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b4a0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b4b0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b4c0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b4d0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b4e0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b4f0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b500:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b510:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b520:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b530:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b540:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b550:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b560:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b570:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b580:·3038·3433·2d34·0a20·202d·2043·4a49·532d··0843-4.··-·CJIS- | |||
| 0003b590:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b5a0:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003b5b0:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b5c0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b5d0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b5e0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b5f0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b600:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b610:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b620:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b630:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b640:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b650:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b660:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b670:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b680:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b690:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b6a0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b6b0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b6c0:·7461·7267·6574·3d22·2369·646d·3834·3037··target="#idm8407 | |||
| 0003b6d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b6e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b6f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b700:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b710:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b720:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b730:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b740:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b750:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b760:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b770:·6522·2069·643d·2269·646d·3834·3037·223e··e"·id="idm8407"> | |||
| 0003b780:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b790:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b7a0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b7b0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b7c0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b7d0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b7e0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b7f0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b800:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b810:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b820:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b830:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b840:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b850:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b860:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b870:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| Max diff block lines reached; 32390726/32423210 bytes (99.90%) of diff not shown. | |||
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037fe0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037ff0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037ff0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038000:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038000:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038010:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038010:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038020:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038020:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038030:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038030:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038040:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038040:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038050:·2032·3032·342d·3131·2d30·3 | 00038050:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 00038060:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00038060:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00038070:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00038070:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038080:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038080:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038090:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038090:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000380a0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000380a0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000380b0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000380b0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000380c0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 000380c0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15172, 236 lines modified | Offset 15172, 236 lines modified | ||
| 0003b430:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003b430:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003b440:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | 0003b440:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | ||
| 0003b450:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b450:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b460:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b460:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b470:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b470:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b480:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b480:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b490:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b490:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b4a0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b4b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b4c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b4d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b4e0:·6170·7365·2220·6964·3d22·6964·6d38·3430··apse"·id="idm840 | |||
| 0003b4f0:·3622·3e3c·7461·626c·6520·636c·6173·733d··6"><table·class= | |||
| 0003b500:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b4a0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b4b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b4c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b4d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b4e0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b4f0:·3036·223e·3c74·6162·6c65·2063·6c61·7373··06"><table·class | |||
| 0003b500:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b510:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b5 | 0003b510:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b520:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b530:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b540:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b550:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b560:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b570:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b580:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b590:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b530:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b540:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b550:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b560:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b570:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b580:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b590:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b5a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b5b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b5c0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b5d0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b5e0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b5f0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b600:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b610:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b620:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b630:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b640:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b650:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b660:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b670:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b680:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b690:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b6a0:·2020·2d20·4343·452d·3930·3834·332d·340a····-·CCE-90843-4. | |||
| 0003b6b0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b6c0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b6d0:·5248·454c·2d30·392d·3635·3130·3130·0a20··RHEL-09-651010.· | |||
| 0003b6e0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b6f0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b700:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b710:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b720:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b730:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b740:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b750:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b760:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b770:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b780:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b790:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b7a0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b7b0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b7c0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b7d0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b7e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b7f0:·2223·6964·6d38·3430·3722·2074·6162·696e··"#idm8407"·tabin | |||
| 0003b800:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b810:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b820:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b830:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b840:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b850:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b860:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b870:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b880:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b890:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b8a0:·6964·6d38·3430·3722·3e3c·7461·626c·6520··idm8407"><table· | |||
| 0003b8b0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b8c0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b8d0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b8e0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b8f0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b900:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b910:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b920:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b930:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b940:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b950:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b960:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b970:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b | 0003b5a0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b5b0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b5c0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b5d0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b5e0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b5f0:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b600:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b610:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b620:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b630:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b640:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| Max diff block lines reached; 32262128/32294474 bytes (99.90%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037dc0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037dd0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037dd0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037de0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037de0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037df0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037df0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037e00:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037e00:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037e10:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037e10:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e20:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e20:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e30:·6620·3230·3234·2d31·312d·303 | 00037e30:·6620·3230·3234·2d31·312d·3037·290a·2020··f·2024-11-07).·· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e40:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e50:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e50:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e60:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e60:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e70:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e70:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e80:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e80:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e90:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e90:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037ea0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037ea0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15127, 301 lines modified | Offset 15127, 301 lines modified | ||
| 0003b160:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b160:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b170:·2223·6964·6d31·3538·3422·2074·6162·696e··"#idm1584"·tabin | 0003b170:·2223·6964·6d31·3538·3422·2074·6162·696e··"#idm1584"·tabin | ||
| 0003b180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b1d0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b1e0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b1f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b200:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b210:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b220:·6d31·3538·3422·3e3c·7072·653e·3c63·6f64··m1584"><pre><cod | |||
| 0003b230:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003b240:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003b250:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003b260:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003b270:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003b280:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003b290:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003b2a0:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003b2b0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b2c0:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | |||
| 0003b2d0:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | |||
| 0003b2e0:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | |||
| 0003b2f0:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | |||
| 0003b300:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | |||
| 0003b310:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | |||
| 0003b320:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | |||
| 0003b330:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | |||
| 0003b340:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | |||
| 0003b350:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | |||
| 0003b360:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | |||
| 0003b370:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | |||
| 0003b380:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | |||
| 0003b390:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | |||
| 0003b3a0:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | |||
| 0003b3b0:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | |||
| 0003b3c0:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | |||
| 0003b3d0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b3e0:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | |||
| 0003b3f0:·2027·2922·0a0a·2020·2020·0a20·2020·2079···')"..····.····y | |||
| 0003b400:·756d·2072·6569·6e73·7461·6c6c·202d·7920··um·reinstall·-y· | |||
| 0003b410:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | |||
| 0003b420:·6e73·7461·6c6c·0a20·2020·200a·6669·0a3c··nstall.····.fi.< | |||
| 0003b430:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b440:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b450:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b460:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b470:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b480:·2223·6964·6d31·3538·3522·2074·6162·696e··"#idm1585"·tabin | |||
| 0003b490:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b4a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b4b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b4c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b4d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b | 0003b4e0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b | 0003b4f0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b | 0003b500:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b | 0003b510:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b | 0003b520:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b | 0003b530:·2269·646d·3135·3835·223e·3c74·6162·6c65··"idm1585"><table | ||
| 0003b | 0003b540:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b | 0003b550:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b | 0003b560:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b | 0003b570:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b | 0003b580:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b | 0003b590:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b | 0003b5a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003b5b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003b5c0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b | 0003b5d0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b | 0003b5e0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b | 0003b5f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b600:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b | 0003b610:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b | 0003b620:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b | 0003b630:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b | 0003b640:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| 0003b | 0003b650:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | ||
| 0003b | 0003b660:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | ||
| 0003b | 0003b670:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | ||
| 0003b | 0003b680:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | ||
| 0003b | 0003b690:·696e·7374·616c·6c5f·636d·643a·2079·756d··install_cmd:·yum | ||
| 0003b | 0003b6a0:·2072·6569·6e73·7461·6c6c·202d·790a·2020···reinstall·-y.·· | ||
| 0003b | 0003b6b0:·7768·656e·3a20·616e·7369·626c·655f·6469··when:·ansible_di | ||
| 0003b | 0003b6c0:·7374·7269·6275·7469·6f6e·2069·6e20·5b20··stribution·in·[· | ||
| 0003b | 0003b6d0:·2246·6564·6f72·6122·2c20·2252·6564·4861··"Fedora",·"RedHa | ||
| 0003b | 0003b6e0:·7422·2c20·2243·656e·744f·5322·2c20·224f··t",·"CentOS",·"O | ||
| 0003b | 0003b6f0:·7261·636c·654c·696e·7578·2220·5d0a·2020··racleLinux"·].·· | ||
| 0003b | 0003b700:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b | 0003b710:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b | 0003b720:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b | 0003b730:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b | 0003b740:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b | 0003b750:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b | 0003b760:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b | 0003b770:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b | 0003b780:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b | 0003b790:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b | 0003b7a0:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b | 0003b7b0:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b | 0003b7c0:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b | 0003b7d0:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b | 0003b7e0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b | 0003b7f0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b | 0003b800:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b | 0003b810:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b | 0003b820:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b | 0003b830:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003b | 0003b840:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| Max diff block lines reached; 13942567/13968151 bytes (99.82%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | ··············(RHVH) | 39 | ··············(RHVH) |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor | 42 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor |
| 43 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 | 43 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 53 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 97, 14 lines modified | Offset 97, 27 lines modified | ||
| 97 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 97 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 106 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 107 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 108 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 109 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 110 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 111 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 117 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 110 | ··set_fact: | 118 | ··set_fact: |
| Offset 231, 27 lines modified | Offset 244, 14 lines modified | ||
| 231 | ··-·PCI-DSSv4-11.5.2 | 244 | ··-·PCI-DSSv4-11.5.2 |
| 232 | ··-·high_complexity | 245 | ··-·high_complexity |
| 233 | ··-·high_severity | 246 | ··-·high_severity |
| 234 | ··-·medium_disruption | 247 | ··-·medium_disruption |
| 235 | ··-·no_reboot_needed | 248 | ··-·no_reboot_needed |
| 236 | ··-·restrict_strategy | 249 | ··-·restrict_strategy |
| 237 | ··-·rpm_verify_hashes | 250 | ··-·rpm_verify_hashes |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 240 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 241 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 242 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 243 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 244 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 245 | fi | ||
| 246 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 251 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 247 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 252 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 248 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 253 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 249 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 254 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 250 | $·rpm·-qf·FILENAME | 255 | $·rpm·-qf·FILENAME |
| 251 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 256 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 272, 14 lines modified | Offset 272, 44 lines modified | ||
| 272 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 272 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 273 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 273 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 274 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 274 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 275 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 275 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 276 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 276 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 277 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 277 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 278 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 278 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 279 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 280 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 281 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 282 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 283 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 284 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 285 | declare·-A·SETPERMS_RPM_DICT | ||
| 286 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 287 | #·is·expected·by·the·RPM·database | ||
| 288 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 289 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 290 | do | ||
| 291 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 292 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 293 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 294 | ········do | ||
| 295 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 296 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 297 | ········done | ||
| 298 | done | ||
| 299 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 300 | #·correct·values | ||
| 301 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 302 | do | ||
| 303 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 304 | done | ||
| 279 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 280 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 306 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 281 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 307 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 282 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 308 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 283 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 309 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 284 | -·name:·Read·list·of·files·with·incorrect·permissions | 310 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 285 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 311 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 357, 44 lines modified | Offset 387, 14 lines modified | ||
| 357 | ··-·PCI-DSSv4-11.5.2 | 387 | ··-·PCI-DSSv4-11.5.2 |
| 358 | ··-·high_complexity | 388 | ··-·high_complexity |
| 359 | ··-·high_severity | 389 | ··-·high_severity |
| 360 | ··-·medium_disruption | 390 | ··-·medium_disruption |
| 361 | ··-·no_reboot_needed | 391 | ··-·no_reboot_needed |
| 362 | ··-·restrict_strategy | 392 | ··-·restrict_strategy |
| 363 | ··-·rpm_verify_permissions | 393 | ··-·rpm_verify_permissions |
| 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 1027607/1035763 bytes (99.21%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00037e50:·3131·2d30·3 | 00037e50:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15180, 301 lines modified | Offset 15180, 301 lines modified | ||
| 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b4c0:·646d·3135·3834·2220·7461·6269·6e64·6578··dm1584"·tabindex | 0003b4c0:·646d·3135·3834·2220·7461·6269·6e64·6578··dm1584"·tabindex | ||
| 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b520:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0003b530:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b540:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b550:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b560:·6c61·7073·6522·2069·643d·2269·646d·3135··lapse"·id="idm15 | |||
| 0003b570:·3834·223e·3c70·7265·3e3c·636f·6465·3e0a··84"><pre><code>. | |||
| 0003b580:·2320·4669·6e64·2077·6869·6368·2066·696c··#·Find·which·fil | |||
| 0003b590:·6573·2068·6176·6520·696e·636f·7272·6563··es·have·incorrec | |||
| 0003b5a0:·7420·6861·7368·2028·6e6f·7420·696e·202f··t·hash·(not·in·/ | |||
| 0003b5b0:·6574·632c·2062·6563·6175·7365·206f·6620··etc,·because·of· | |||
| 0003b5c0:·7468·6520·7379·7374·656d·2072·656c·6174··the·system·relat | |||
| 0003b5d0:·6564·2063·6f6e·6669·6720·6669·6c65·7329··ed·config·files) | |||
| 0003b5e0:·2061·6e64·2074·6865·6e20·6765·7420·6669···and·then·get·fi | |||
| 0003b5f0:·6c65·7320·6e61·6d65·730a·6669·6c65·735f··les·names.files_ | |||
| 0003b600:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | |||
| 0003b610:·6173·683d·2224·2872·706d·202d·5661·202d··ash="$(rpm·-Va·- | |||
| 0003b620:·2d6e·6f63·6f6e·6669·6720·7c20·6772·6570··-noconfig·|·grep | |||
| 0003b630:·202d·4520·275e·2e2e·3527·207c·2061·776b···-E·'^..5'·|·awk | |||
| 0003b640:·2027·7b70·7269·6e74·2024·4e46·7d27·2029···'{print·$NF}'·) | |||
| 0003b650:·220a·0a69·6620·5b20·2d6e·2022·2466·696c··"..if·[·-n·"$fil | |||
| 0003b660:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | |||
| 0003b670:·745f·6861·7368·2220·5d3b·2074·6865·6e0a··t_hash"·];·then. | |||
| 0003b680:·2020·2020·2320·4672·6f6d·2066·696c·6573······#·From·files | |||
| 0003b690:·206e·616d·6573·2067·6574·2070·6163·6b61···names·get·packa | |||
| 0003b6a0:·6765·206e·616d·6573·2061·6e64·2063·6861··ge·names·and·cha | |||
| 0003b6b0:·6e67·6520·6e65·776c·696e·6520·746f·2073··nge·newline·to·s | |||
| 0003b6c0:·7061·6365·2c20·6265·6361·7573·6520·7270··pace,·because·rp | |||
| 0003b6d0:·6d20·7772·6974·6573·2065·6163·6820·7061··m·writes·each·pa | |||
| 0003b6e0:·636b·6167·6520·746f·206e·6577·206c·696e··ckage·to·new·lin | |||
| 0003b6f0:·650a·2020·2020·7061·636b·6167·6573·5f74··e.····packages_t | |||
| 0003b700:·6f5f·7265·696e·7374·616c·6c3d·2224·2872··o_reinstall="$(r | |||
| 0003b710:·706d·202d·7166·2024·6669·6c65·735f·7769··pm·-qf·$files_wi | |||
| 0003b720:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | |||
| 0003b730:·6820·7c20·7472·2027·5c6e·2720·2720·2729··h·|·tr·'\n'·'·') | |||
| 0003b740:·220a·0a20·2020·200a·2020·2020·7975·6d20··"..····.····yum· | |||
| 0003b750:·7265·696e·7374·616c·6c20·2d79·2024·7061··reinstall·-y·$pa | |||
| 0003b760:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | |||
| 0003b770:·616c·6c0a·2020·2020·0a66·690a·3c2f·636f··all.····.fi.</co | |||
| 0003b780:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b790:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b7a0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b7b0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b7c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b7d0:·646d·3135·3835·2220·7461·6269·6e64·6578··dm1585"·tabindex | |||
| 0003b7e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b7f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b800:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b810:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b820:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b | 0003b830:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b | 0003b840:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003b | 0003b850:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003b860:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b870:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003b880:·6d31·3538·3522·3e3c·7461·626c·6520·636c··m1585"><table·cl | ||
| 0003b | 0003b890:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b | 0003b8a0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b | 0003b8b0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b | 0003b8c0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b | 0003b8d0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b | 0003b8e0:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003b | 0003b8f0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003b900:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003b | 0003b910:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003b | 0003b920:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003b930:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b | 0003b940:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b | 0003b950:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b | 0003b960:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003b | 0003b970:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b | 0003b980:·636f·6465·3e2d·206e·616d·653a·2027·5365··code>-·name:·'Se | ||
| 0003b | 0003b990:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| 0003b | 0003b9a0:·6d61·6e61·6765·7220·7265·696e·7374·616c··manager·reinstal | ||
| 0003b | 0003b9b0:·6c20·636f·6d6d·616e·6427·0a20·2073·6574··l·command'.··set | ||
| 0003b | 0003b9c0:·5f66·6163·743a·0a20·2020·2070·6163·6b61··_fact:.····packa | ||
| 0003b | 0003b9d0:·6765·5f6d·616e·6167·6572·5f72·6569·6e73··ge_manager_reins | ||
| 0003b | 0003b9e0:·7461·6c6c·5f63·6d64·3a20·7975·6d20·7265··tall_cmd:·yum·re | ||
| 0003b | 0003b9f0:·696e·7374·616c·6c20·2d79·0a20·2077·6865··install·-y.··whe | ||
| 0003b | 0003ba00:·6e3a·2061·6e73·6962·6c65·5f64·6973·7472··n:·ansible_distr | ||
| 0003b | 0003ba10:·6962·7574·696f·6e20·696e·205b·2022·4665··ibution·in·[·"Fe | ||
| 0003b | 0003ba20:·646f·7261·222c·2022·5265·6448·6174·222c··dora",·"RedHat", | ||
| 0003b | 0003ba30:·2022·4365·6e74·4f53·222c·2022·4f72·6163···"CentOS",·"Orac | ||
| 0003b | 0003ba40:·6c65·4c69·6e75·7822·205d·0a20·2074·6167··leLinux"·].··tag | ||
| 0003b | 0003ba50:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | ||
| 0003b750:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | |||
| 0003b760:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | |||
| 0003b770:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | |||
| 0003b780:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | |||
| 0003b790:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | |||
| 0003b7a0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b7b0:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | |||
| 0003b7c0:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | |||
| 0003b7d0:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | |||
| 0003b7e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b7f0:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | |||
| 0003b800:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | |||
| 0003b810:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b820:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b830:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | |||
| 0003b840:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | |||
| 0003b850:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | |||
| 0003b860:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | |||
| 0003b870:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | |||
| 0003b880:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| Max diff block lines reached; 24308122/24349438 bytes (99.83%) of diff not shown. | |||
| Offset 14384, 15 lines modified | Offset 14384, 15 lines modified | ||
| 000382f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000382f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00038300:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00038300:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038310:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038310:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038320:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038320:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038330:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038330:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038340:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038340:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038350:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | 00038350:·2020·2020·2861·7320·6f66·2032·3032·342d······(as·of·2024- | ||
| 00038360:·3131·2d30·3 | 00038360:·3131·2d30·3729·0a20·2020·2020·2020·2020··11-07).········· | ||
| 00038370:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038370:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038380:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038380:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038390:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038390:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 000383a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 000383a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000383b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000383b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000383c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000383c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000383d0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000383d0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15203, 301 lines modified | Offset 15203, 301 lines modified | ||
| 0003b620:·7461·7267·6574·3d22·2369·646d·3135·3834··target="#idm1584 | 0003b620:·7461·7267·6574·3d22·2369·646d·3135·3834··target="#idm1584 | ||
| 0003b630:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b630:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b640:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b640:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b650:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b650:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b660:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b660:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b670:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b670:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b680:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b680:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b690:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003b6a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b6b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b6c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b6d0:·2069·643d·2269·646d·3135·3834·223e·3c70···id="idm1584"><p | |||
| 0003b6e0:·7265·3e3c·636f·6465·3e0a·2320·4669·6e64··re><code>.#·Find | |||
| 0003b6f0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | |||
| 0003b700:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | |||
| 0003b710:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | |||
| 0003b720:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | |||
| 0003b730:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | |||
| 0003b740:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | |||
| 0003b750:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | |||
| 0003b760:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | |||
| 0003b690:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b6a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b6b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b6c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b6d0:·7365·2220·6964·3d22·6964·6d31·3538·3422··se"·id="idm1584" | |||
| 0003b6e0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b6f0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b700:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b710:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b720:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b730:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | |||
| 0003b740:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | |||
| 0003b750:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b760:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0003b770:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b780:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b790:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b7a0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b7b0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | |||
| 0003b7c0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | |||
| 0003b7d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b7e0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | |||
| 0003b7f0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | |||
| 0003b800:·7220·7265·696e·7374·616c·6c20·636f·6d6d··r·reinstall·comm | |||
| 0003b810:·616e·6427·0a20·2073·6574·5f66·6163·743a··and'.··set_fact: | |||
| 0003b820:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | |||
| 0003b830:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | |||
| 0003b840:·6d64·3a20·7975·6d20·7265·696e·7374·616c··md:·yum·reinstal | |||
| 0003b850:·6c20·2d79·0a20·2077·6865·6e3a·2061·6e73··l·-y.··when:·ans | |||
| 0003b860:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | |||
| 0003b870:·6e20·696e·205b·2022·4665·646f·7261·222c··n·in·[·"Fedora", | |||
| 0003b880:·2022·5265·6448·6174·222c·2022·4365·6e74···"RedHat",·"Cent | |||
| 0003b890:·4f53·222c·2022·4f72·6163·6c65·4c69·6e75··OS",·"OracleLinu | |||
| 0003b8a0:·7822·205d·0a20·2074·6167·733a·0a20·202d··x"·].··tags:.··- | |||
| 0003b8b0:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | |||
| 0003b8c0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | |||
| 0003b8d0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | |||
| 0003b8e0:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | |||
| 0003b8f0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | |||
| 0003b900:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | |||
| 0003b910:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | |||
| 0003b920:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b930:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | |||
| 0003b940:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | |||
| 0003b950:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | |||
| 0003b960:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003b970:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | |||
| 0003b980:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b990:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b9a0:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | |||
| 0003b9b0:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | |||
| 0003b9c0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | |||
| 0003b9d0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | |||
| 0003b9e0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b9f0:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | |||
| 0003ba00:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | |||
| 0003ba10:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | |||
| 0003ba20:·0a0a·2d20·6e61·6d65·3a20·2753·6574·2066··..-·name:·'Set·f | |||
| 0003ba30:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | |||
| 0003ba40:·6167·6572·2072·6569·6e73·7461·6c6c·2063··ager·reinstall·c | |||
| 0003ba50:·6f6d·6d61·6e64·2028·7a79·7070·6572·2927··ommand·(zypper)' | |||
| 0003ba60:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | |||
| 0003ba70:·2070·6163·6b61·6765·5f6d·616e·6167·6572···package_manager | |||
| 0003ba80:·5f72·6569·6e73·7461·6c6c·5f63·6d64·3a20··_reinstall_cmd:· | |||
| 0003ba90:·7a79·7070·6572·2069·6e20·2d66·202d·790a··zypper·in·-f·-y. | |||
| 0003baa0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003bab0:·6469·7374·7269·6275·7469·6f6e·203d·3d20··distribution·==· | |||
| 0003bac0:·2253·4c45·5322·0a20·2074·6167·733a·0a20··"SLES".··tags:.· | |||
| 0003bad0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | |||
| 0003bae0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | |||
| 0003baf0:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | |||
| 0003bb00:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | |||
| 0003bb10:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | |||
| 0003bb20:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | |||
| 0003bb30:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | |||
| 0003bb40:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003bb50:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | |||
| 0003bb60:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | |||
| 0003bb70:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | |||
| 0003bb80:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | |||
| 0003bb90:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | |||
| 0003bba0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003bbb0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003bbc0:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | |||
| 0003bbd0:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | |||
| 0003bbe0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | |||
| 0003bbf0:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | |||
| 0003bc00:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | |||
| 0003bc10:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | |||
| 0003bc20:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | |||
| Max diff block lines reached; 16003351/16029073 bytes (99.84%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | ··············Virtualization·Host·(RHVH) | 59 | ··············Virtualization·Host·(RHVH) |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-vpp | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-vpp |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor | 62 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor |
| 63 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 | 63 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 116, 14 lines modified | Offset 116, 27 lines modified | ||
| 116 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 116 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 117 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 117 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 125 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 126 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 127 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 128 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 129 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 130 | fi | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 128 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 136 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 129 | ··set_fact: | 137 | ··set_fact: |
| Offset 250, 27 lines modified | Offset 263, 14 lines modified | ||
| 250 | ··-·PCI-DSSv4-11.5.2 | 263 | ··-·PCI-DSSv4-11.5.2 |
| 251 | ··-·high_complexity | 264 | ··-·high_complexity |
| 252 | ··-·high_severity | 265 | ··-·high_severity |
| 253 | ··-·medium_disruption | 266 | ··-·medium_disruption |
| 254 | ··-·no_reboot_needed | 267 | ··-·no_reboot_needed |
| 255 | ··-·restrict_strategy | 268 | ··-·restrict_strategy |
| 256 | ··-·rpm_verify_hashes | 269 | ··-·rpm_verify_hashes |
| 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 258 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 259 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 260 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 261 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 262 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 263 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 264 | fi | ||
| 265 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 270 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 266 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 271 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 267 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 272 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 268 | run·the·following·command·to·determine·which·package·owns·it: | 273 | run·the·following·command·to·determine·which·package·owns·it: |
| 269 | $·rpm·-qf·FILENAME | 274 | $·rpm·-qf·FILENAME |
| 270 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 275 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 271 | $·sudo·rpm·--setugids·PACKAGENAME | 276 | $·sudo·rpm·--setugids·PACKAGENAME |
| Offset 289, 14 lines modified | Offset 289, 40 lines modified | ||
| 289 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 289 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 290 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 290 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 294 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 294 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 298 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 299 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 300 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 301 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 302 | declare·-A·SETPERMS_RPM_DICT | ||
| 303 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 304 | #·is·expected·by·the·RPM·database | ||
| 305 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 306 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 307 | do | ||
| 308 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 309 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 310 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 311 | done | ||
| 312 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 313 | #·correct·values | ||
| 314 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 315 | do | ||
| 316 | ········rpm·--setugids·"${RPM_PACKAGE}" | ||
| 317 | done | ||
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 297 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 319 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 298 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 320 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 299 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 321 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 300 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 322 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 301 | -·name:·Read·list·of·files·with·incorrect·ownership | 323 | -·name:·Read·list·of·files·with·incorrect·ownership |
| 302 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 324 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 371, 40 lines modified | Offset 397, 14 lines modified | ||
| 371 | ··-·PCI-DSSv4-11.5.2 | 397 | ··-·PCI-DSSv4-11.5.2 |
| 372 | ··-·high_complexity | 398 | ··-·high_complexity |
| 373 | ··-·high_severity | 399 | ··-·high_severity |
| 374 | ··-·medium_disruption | 400 | ··-·medium_disruption |
| 375 | ··-·no_reboot_needed | 401 | ··-·no_reboot_needed |
| 376 | ··-·restrict_strategy | 402 | ··-·restrict_strategy |
| 377 | ··-·rpm_verify_ownership | 403 | ··-·rpm_verify_ownership |
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 383 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| Max diff block lines reached; 1116015/1123882 bytes (99.30%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380d0:·7320·6f66·2032·3032·342d·3131·2d30·3 | 000380d0:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15134, 167 lines modified | Offset 15134, 167 lines modified | ||
| 0003b1d0:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | 0003b1d0:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | ||
| 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b240:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b250:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b260:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b270:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b280:·6522·2069·643d·2269·646d·3533·3839·223e··e"·id="idm5389"> | |||
| 0003b290:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b2a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b240:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b250:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b260:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b270:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b280:·7365·2220·6964·3d22·6964·6d35·3338·3922··se"·id="idm5389" | |||
| 0003b290:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b2a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b2b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b2 | 0003b2b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b2d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b2 | 0003b2c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b2d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b2e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b2f0:· | 0003b2f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b300:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b310:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b320:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b330:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b300:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b310:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b320:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b330:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b340:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b350:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b360:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b370:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b380:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b390:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b3a0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b3b0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b3c0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b3d0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b3e0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b3f0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b400:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b410:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b420:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b430:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b440:·2043·4345·2d38·3330·3637·2d39·0a20·202d···CCE-83067-9.··- | |||
| 0003b450:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b460:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b470:·532d·3132·2d30·3130·3439·390a·2020·2d20··S-12-010499.··-· | |||
| 0003b480:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b490:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b4a0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b4b0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b4c0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b4d0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b4e0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b4f0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b500:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b510:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b520:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b530:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b540:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b550:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b560:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b570:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b580:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b590:·646d·3533·3930·2220·7461·6269·6e64·6578··dm5390"·tabindex | |||
| 0003b5a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b5b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b5c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b5d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b5e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b5f0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b600:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b610:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b620:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b630:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b640:·3533·3930·223e·3c74·6162·6c65·2063·6c61··5390"><table·cla | |||
| 0003b650:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b660:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b670:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b680:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b690:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b6a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b6b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b6c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b6d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b6e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b6f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b700:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b710:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b | 0003b340:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003b350:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b360:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b370:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b380:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b390:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b | 0003b3a0:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | ||
| 0003b3b0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b3c0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b3d0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b3e0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b750:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b760:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| Max diff block lines reached; 20027040/20049864 bytes (99.89%) of diff not shown. | |||
| Offset 14342, 15 lines modified | Offset 14342, 15 lines modified | ||
| 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380c0:·7320·6f66·2032·3032·342d·3131·2d30·3 | 000380c0:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15139, 168 lines modified | Offset 15139, 168 lines modified | ||
| 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b230:·3338·3922·2074·6162·696e·6465·783d·2230··389"·tabindex="0 | 0003b230:·3338·3922·2074·6162·696e·6465·783d·2230··389"·tabindex="0 | ||
| 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b290:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b2a0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b2b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b2c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b2d0:·6170·7365·2220·6964·3d22·6964·6d35·3338··apse"·id="idm538 | |||
| 0003b2e0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b2f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b290:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b2a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b2b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b2c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b2d0:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b2e0:·3839·223e·3c74·6162·6c65·2063·6c61·7373··89"><table·class | |||
| 0003b2f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b300:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b3 | 0003b300:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b310:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b320:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b330:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b340:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b350:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b360:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b370:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b380:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b320:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b330:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b340:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b350:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b360:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b370:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b380:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b390:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b3a0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b3b0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b3c0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b3d0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b3e0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b3f0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b400:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b410:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b420:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b430:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b440:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b450:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b460:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b470:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b480:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b490:·2020·2d20·4343·452d·3833·3036·372d·390a····-·CCE-83067-9. | |||
| 0003b4a0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b4b0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b4c0:·534c·4553·2d31·322d·3031·3034·3939·0a20··SLES-12-010499.· | |||
| 0003b4d0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b4e0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b4f0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b500:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b510:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b520:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b530:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b540:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b550:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b560:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b570:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b580:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b590:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b5a0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b5b0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b5c0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b5d0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b5e0:·2223·6964·6d35·3339·3022·2074·6162·696e··"#idm5390"·tabin | |||
| 0003b5f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b600:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b610:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b620:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b630:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b640:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b650:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b660:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b670:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b680:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b690:·6964·6d35·3339·3022·3e3c·7461·626c·6520··idm5390"><table· | |||
| 0003b6a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b6b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b6c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b6d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b6e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b6f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b700:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b710:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b720:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b730:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b740:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b750:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b760:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b | 0003b390:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b3a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b3b0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b3c0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b3d0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b3e0:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b3f0:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b400:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b410:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b420:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b430:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| Max diff block lines reached; 20249484/20272446 bytes (99.89%) of diff not shown. | |||
| Offset 14344, 15 lines modified | Offset 14344, 15 lines modified | ||
| 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380e0:·7320·6f66·2032·3032·342d·3131·2d30·3 | 000380e0:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15125, 167 lines modified | Offset 15125, 167 lines modified | ||
| 0003b140:·2d74·6172·6765·743d·2223·6964·6d35·3338··-target="#idm538 | 0003b140:·2d74·6172·6765·743d·2223·6964·6d35·3338··-target="#idm538 | ||
| 0003b150:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | 0003b150:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b1b0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b1c0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b1d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b1e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b1f0:·7365·2220·6964·3d22·6964·6d35·3338·3922··se"·id="idm5389" | |||
| 0003b200:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b210:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b1b0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b1c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b1d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b1e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b1f0:·7073·6522·2069·643d·2269·646d·3533·3839··pse"·id="idm5389 | |||
| 0003b200:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b210:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b220:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b2 | 0003b220:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b230:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b240:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b250:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b260:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b270:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b280:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b290:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b2a0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b240:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b250:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b260:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b270:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b280:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b290:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b2a0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b2b0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b2c0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b2d0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b2e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b2f0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b300:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b310:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b320:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b330:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b340:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b350:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b360:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b370:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b380:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b390:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b3a0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b3b0:·2d20·4343·452d·3833·3036·372d·390a·2020··-·CCE-83067-9.·· | |||
| 0003b3c0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b3d0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b3e0:·4553·2d31·322d·3031·3034·3939·0a20·202d··ES-12-010499.··- | |||
| 0003b3f0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b400:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b410:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b420:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b430:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b440:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b450:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b460:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b470:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b480:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b490:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b4a0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b4b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b4c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b4d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b4e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b4f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b500:·6964·6d35·3339·3022·2074·6162·696e·6465··idm5390"·tabinde | |||
| 0003b510:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b520:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b530:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b540:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b550:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b560:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b570:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b580:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b590:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b5a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b5b0:·6d35·3339·3022·3e3c·7461·626c·6520·636c··m5390"><table·cl | |||
| 0003b5c0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b5d0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b5e0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b5f0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b600:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b610:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b620:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b630:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b640:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b650:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b660:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b670:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b680:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b | 0003b2b0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b2c0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b2d0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b2e0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b2f0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b300:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b310:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b320:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b330:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b340:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b350:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| Max diff block lines reached; 7803562/7826386 bytes (99.71%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 122, 67 lines modified | Offset 122, 67 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | -·name:·Ensure·aide·is·installed | ||
| 135 | ··package: | ||
| 136 | ····name:·aide | ||
| 137 | ····state:·present | ||
| 138 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 139 | ··tags: | ||
| 140 | ··-·CCE-83067-9 | ||
| 141 | ··-·CJIS-5.10.1.3 | ||
| 142 | ··-·DISA-STIG-SLES-12-010499 | ||
| 143 | ··-·NIST-800-53-CM-6(a) | ||
| 144 | ··-·PCI-DSS-Req-11.5 | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | ||
| 146 | ··-·enable_strategy | ||
| 147 | ··-·low_complexity | ||
| 148 | ··-·low_disruption | ||
| 149 | ··-·medium_severity | ||
| 150 | ··-·no_reboot_needed | ||
| 151 | ··-·package_aide_installed | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | include·install_aide | 134 | include·install_aide |
| 158 | class·install_aide·{ | 135 | class·install_aide·{ |
| 159 | ··package·{·'aide': | 136 | ··package·{·'aide': |
| 160 | ····ensure·=>·'installed', | 137 | ····ensure·=>·'installed', |
| 161 | ··} | 138 | ··} |
| 162 | } | 139 | } |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 145 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | zypper·install·-y·"aide" | 147 | zypper·install·-y·"aide" |
| 175 | else | 148 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 150 | fi |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | [[packages]] | ||
| 153 | name·=·"aide" | ||
| 154 | version·=·"*" | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | -·name:·Ensure·aide·is·installed | ||
| 161 | ··package: | ||
| 162 | ····name:·aide | ||
| 163 | ····state:·present | ||
| 164 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 165 | ··tags: | ||
| 166 | ··-·CCE-83067-9 | ||
| 167 | ··-·CJIS-5.10.1.3 | ||
| 168 | ··-·DISA-STIG-SLES-12-010499 | ||
| 169 | ··-·NIST-800-53-CM-6(a) | ||
| 170 | ··-·PCI-DSS-Req-11.5 | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | ||
| 172 | ··-·enable_strategy | ||
| 173 | ··-·low_complexity | ||
| 174 | ··-·low_disruption | ||
| 175 | ··-·medium_severity | ||
| 176 | ··-·no_reboot_needed | ||
| 177 | ··-·package_aide_installed | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/bin/aide·--init | 180 | $·sudo·/usr/bin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 209, 14 lines modified | Offset 209, 29 lines modified | ||
| 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 212 | ·············_\x8c_\x8i_\x8s············1.4.1 | 212 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 219 | zypper·-q·--no-remote·ref | ||
| 220 | zypper·install·-y·"aide" | ||
| Max diff block lines reached; 924108/929699 bytes (99.40%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 000380d0:·2032·3032·342d·3131·2d30·3 | 000380d0:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14793, 146 lines modified | Offset 14793, 146 lines modified | ||
| 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3133··-target="#idm813 | 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3133··-target="#idm813 | ||
| 00039c90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 00039c90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00039cf0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 00039d00:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00039d10:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039d20:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039d30:·7365·2220·6964·3d22·6964·6d38·3133·3022··se"·id="idm8130" | |||
| 00039d40:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039d50:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039cf0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00039d00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00039d10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039d20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039d30:·7073·6522·2069·643d·2269·646d·3831·3330··pse"·id="idm8130 | |||
| 00039d40:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039d50:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039d60:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00039d | 00039d60:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 00039d80:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00039d90:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00039da0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039db0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00039dc0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039dd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00039de0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00039df0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00039e00:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00039e10:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039e20:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039e30:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00039e40:·3a20·456e·7375·7265·2064·6e66·2d61·7574··:·Ensure·dnf-aut | |||
| 00039 | 00039d70:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 00039d80:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039d90:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039da0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039db0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039dc0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039dd0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039de0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039df0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039e00:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039e10:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00039e20:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00039e30:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 00039e40:·2069·6e73·7461·6c6c·5f64·6e66·2d61·7574···install_dnf-aut | |||
| 00039e50:·6f6d·6174·6963·0a0a·636c·6173·7320·696e··omatic..class·in | |||
| 00039e60:·7374·616c·6c5f·646e·662d·6175·746f·6d61··stall_dnf-automa | |||
| 00039e | 00039e70:·7469·6320·7b0a·2020·7061·636b·6167·6520··tic·{.··package· | ||
| 00039e70:·2020·206e·616d·653a·2064·6e66·2d61·7574·····name:·dnf-aut | |||
| 00039e80:·6f6d·6174·6963·0a20·2020·2073·7461·7465··omatic.····state | |||
| 00039e90:·3a20·7072·6573·656e·740a·2020·7461·6773··:·present.··tags | |||
| 00039ea0:·3a0a·2020·2d20·4343·452d·3931·3437·362d··:.··-·CCE-91476- | |||
| 00039eb0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 00039ec0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00039ed0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00039ee0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00039ef0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00039f00:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00039f10:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 00039 | 00039e80:·7b20·2764·6e66·2d61·7574·6f6d·6174·6963··{·'dnf-automatic | ||
| 00039 | 00039e90:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | ||
| 00039ea0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 00039eb0:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 00039 | 00039ec0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 00039 | 00039ed0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 00039 | 00039ee0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 00039 | 00039ef0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 00039f | 00039f00:·2d74·6172·6765·743d·2223·6964·6d38·3133··-target="#idm813 | ||
| 00039f | 00039f10:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 00039f | 00039f20:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00039f | 00039f30:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00039f | 00039f40:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00039f | 00039f50:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00039f | 00039f60:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00039ff0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003 | 00039f70:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 00039f80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003 | 00039f90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003 | 00039fa0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003 | 00039fb0:·2220·6964·3d22·6964·6d38·3133·3122·3e3c··"·id="idm8131">< | ||
| 0003 | 00039fc0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003a050:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003 | 00039fd0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 00039fe0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003 | 00039ff0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003a0 | 0003a000:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003a0 | 0003a010:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003a0 | 0003a020:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003a0 | 0003a030:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003a0 | 0003a040:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003a0 | 0003a050:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003a0 | 0003a060:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003a0 | 0003a070:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003a | 0003a080:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003a | 0003a090:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003a | 0003a0a0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003a0b0:·3e3c·636f·6465·3e0a·7a79·7070·6572·2069··><code>.zypper·i | |||
| 0003a0c0:·6e73·7461·6c6c·202d·7920·2264·6e66·2d61··nstall·-y·"dnf-a | |||
| 0003a0d0:·7574·6f6d·6174·6963·220a·3c2f·636f·6465··utomatic".</code | |||
| 0003a130:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003a140:·6465·2069·6e73·7461·6c6c·5f64·6e66·2d61··de·install_dnf-a | |||
| 0003a150:·7574·6f6d·6174·6963·0a0a·636c·6173·7320··utomatic..class· | |||
| 0003a160:·696e·7374·616c·6c5f·646e·662d·6175·746f··install_dnf-auto | |||
| 0003a170:·6d61·7469·6320·7b0a·2020·7061·636b·6167··matic·{.··packag | |||
| 0003a180:·6520·7b20·2764·6e66·2d61·7574·6f6d·6174··e·{·'dnf-automat | |||
| 0003a190:·6963·273a·0a20·2020·2065·6e73·7572·6520··ic':.····ensure· | |||
| Max diff block lines reached; 2027820/2047746 bytes (99.03%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 87, 55 lines modified | Offset 87, 55 lines modified | ||
| 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91476-2 | 91 | Identifiers:·CCE-91476-2 |
| 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 99 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 100 | ··package: | ||
| 101 | ····name:·dnf-automatic | ||
| 102 | ····state:·present | ||
| 103 | ··tags: | ||
| 104 | ··-·CCE-91476-2 | ||
| 105 | ··-·enable_strategy | ||
| 106 | ··-·low_complexity | ||
| 107 | ··-·low_disruption | ||
| 108 | ··-·medium_severity | ||
| 109 | ··-·no_reboot_needed | ||
| 110 | ··-·package_dnf-automatic_installed | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 116 | include·install_dnf-automatic | 99 | include·install_dnf-automatic |
| 117 | class·install_dnf-automatic·{ | 100 | class·install_dnf-automatic·{ |
| 118 | ··package·{·'dnf-automatic': | 101 | ··package·{·'dnf-automatic': |
| 119 | ····ensure·=>·'installed', | 102 | ····ensure·=>·'installed', |
| 120 | ··} | 103 | ··} |
| 121 | } | 104 | } |
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 110 | zypper·install·-y·"dnf-automatic" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | [[packages]] | 112 | [[packages]] |
| 124 | name·=·"dnf-automatic" | 113 | name·=·"dnf-automatic" |
| 125 | version·=·"*" | 114 | version·=·"*" |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | 120 | -·name:·Ensure·dnf-automatic·is·installed | |
| 121 | ··package: | ||
| 122 | ····name:·dnf-automatic | ||
| 123 | ····state:·present | ||
| 124 | ··tags: | ||
| 125 | ··-·CCE-91476-2 | ||
| 126 | ··-·enable_strategy | ||
| 127 | ··-·low_complexity | ||
| 128 | ··-·low_disruption | ||
| 129 | ··-·medium_severity | ||
| 130 | ··-·no_reboot_needed | ||
| 131 | ··-·package_dnf-automatic_installed | ||
| 132 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 132 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 133 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically | 133 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically |
| 134 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 134 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 135 | automatic.conf. | 135 | automatic.conf. |
| 136 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the | 136 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the |
| 137 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security | 137 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security |
| 138 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage | 138 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage |
| Offset 146, 37 lines modified | Offset 146, 14 lines modified | ||
| 146 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 146 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 147 | Identifiers:·CCE-91474-7 | 147 | Identifiers:·CCE-91474-7 |
| 148 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 148 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 149 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 149 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 150 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 150 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 151 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 151 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 152 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 152 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 158 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 159 | ··ini_file: | ||
| 160 | ····dest:·/etc/dnf/automatic.conf | ||
| 161 | ····section:·commands | ||
| 162 | ····option:·apply_updates | ||
| 163 | ····value:·'yes' | ||
| 164 | ····create:·true | ||
| 165 | ··tags: | ||
| 166 | ··-·CCE-91474-7 | ||
| 167 | ··-·NIST-800-53-CM-6(a) | ||
| 168 | ··-·NIST-800-53-SI-2(5) | ||
| 169 | ··-·NIST-800-53-SI-2(c) | ||
| 170 | ··-·dnf-automatic_apply_updates | ||
| 171 | ··-·low_complexity | ||
| 172 | ··-·medium_disruption | ||
| 173 | ··-·medium_severity | ||
| 174 | ··-·no_reboot_needed | ||
| 175 | ··-·unknown_strategy | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 177 | found=false | 154 | found=false |
| 178 | #·set·value·in·all·files·if·they·contain·section·or·key | 155 | #·set·value·in·all·files·if·they·contain·section·or·key |
| 179 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | 156 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do |
| 180 | ····if·[·!·-e·"$f"·];·then | 157 | ····if·[·!·-e·"$f"·];·then |
| Max diff block lines reached; 149617/155008 bytes (96.52%) of diff not shown. | |||
| Offset 14312, 15 lines modified | Offset 14312, 15 lines modified | ||
| 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037ee0:·3234·2d31·312d·303 | 00037ee0:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15171, 167 lines modified | Offset 15171, 167 lines modified | ||
| 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | ||
| 0003b430:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | 0003b430:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | ||
| 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b490:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b4a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b4b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b4c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b4d0:·7073·6522·2069·643d·2269·646d·3533·3839··pse"·id="idm5389 | |||
| 0003b4e0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b4f0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b490:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b4a0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b4b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b4c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b4d0:·6170·7365·2220·6964·3d22·6964·6d35·3338··apse"·id="idm538 | |||
| 0003b4e0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b4f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b500:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b5 | 0003b500:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b510:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b520:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b530:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b540:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b550:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b560:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b570:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b580:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b520:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b530:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b540:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b550:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b560:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b570:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b580:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b590:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b5a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b5b0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b5c0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b5d0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b5e0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b5f0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b600:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b610:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b620:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b630:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b640:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b650:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b660:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b670:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b680:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b690:·202d·2043·4345·2d38·3330·3637·2d39·0a20···-·CCE-83067-9.· | |||
| 0003b6a0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b6b0:·0a20·202d·2044·4953·412d·5354·4947·2d53··.··-·DISA-STIG-S | |||
| 0003b6c0:·4c45·532d·3132·2d30·3130·3439·390a·2020··LES-12-010499.·· | |||
| 0003b6d0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b6e0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b6f0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b700:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b710:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b720:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b730:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b740:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b750:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b760:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b770:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b780:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b790:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b7a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b7b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b7c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b7d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b7e0:·2369·646d·3533·3930·2220·7461·6269·6e64··#idm5390"·tabind | |||
| 0003b7f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b800:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b810:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b820:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b830:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b840:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003b850:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b860:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b870:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b880:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b890:·646d·3533·3930·223e·3c74·6162·6c65·2063··dm5390"><table·c | |||
| 0003b8a0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b8b0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b8c0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b8d0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b8e0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b8f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b900:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b910:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b920:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b930:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b940:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b950:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b960:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b | 0003b590:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b5a0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b5b0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b5c0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b5d0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b5e0:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b5f0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b600:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b610:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b620:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b630:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| Max diff block lines reached; 19155836/19178660 bytes (99.88%) of diff not shown. | |||
| Offset 14313, 15 lines modified | Offset 14313, 15 lines modified | ||
| 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00037ee0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037ef0:·303 | 00037ef0:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15149, 168 lines modified | Offset 15149, 168 lines modified | ||
| 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b2d0:·6d35·3338·3922·2074·6162·696e·6465·783d··m5389"·tabindex= | 0003b2d0:·6d35·3338·3922·2074·6162·696e·6465·783d··m5389"·tabindex= | ||
| 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b330:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b340:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b350:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b360:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b370:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b380:·3338·3922·3e3c·7461·626c·6520·636c·6173··389"><table·clas | |||
| 0003b390:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b330:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b340:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b350:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b360:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b370:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b380:·3533·3839·223e·3c74·6162·6c65·2063·6c61··5389"><table·cla | |||
| 0003b390:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b3a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b3 | 0003b3a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b3b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b3c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b3d0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b3e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b3f0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b400:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b410:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b420:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b3c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b3d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b3e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b3f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b400:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b410:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b420:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b430:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b440:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b450:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b460:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b470:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b480:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b490:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b4a0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b4b0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b4c0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b4d0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b4e0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b4f0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b500:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b510:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b520:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b530:·3a0a·2020·2d20·4343·452d·3833·3036·372d··:.··-·CCE-83067- | |||
| 0003b540:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b550:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b560:·472d·534c·4553·2d31·322d·3031·3034·3939··G-SLES-12-010499 | |||
| 0003b570:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b580:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b590:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b5a0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b5b0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b5c0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b5d0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b5e0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b5f0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b600:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b610:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b620:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b630:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b640:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b650:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b660:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b670:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b680:·743d·2223·6964·6d35·3339·3022·2074·6162··t="#idm5390"·tab | |||
| 0003b690:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b6a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b6b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b6c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b6d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b6e0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b6f0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b700:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b710:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b720:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b730:·3d22·6964·6d35·3339·3022·3e3c·7461·626c··="idm5390"><tabl | |||
| 0003b740:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b750:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b760:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b770:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b780:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b790:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b7a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b7b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b7c0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b7d0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b7e0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b7f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b800:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b | 0003b430:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b440:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b450:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b460:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b470:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b480:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b490:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b4a0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b4b0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b4c0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b4d0:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| Max diff block lines reached; 8133979/8156941 bytes (99.72%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 125, 67 lines modified | Offset 125, 67 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | -·name:·Ensure·aide·is·installed | ||
| 138 | ··package: | ||
| 139 | ····name:·aide | ||
| 140 | ····state:·present | ||
| 141 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 142 | ··tags: | ||
| 143 | ··-·CCE-83067-9 | ||
| 144 | ··-·CJIS-5.10.1.3 | ||
| 145 | ··-·DISA-STIG-SLES-12-010499 | ||
| 146 | ··-·NIST-800-53-CM-6(a) | ||
| 147 | ··-·PCI-DSS-Req-11.5 | ||
| 148 | ··-·PCI-DSSv4-11.5.2 | ||
| 149 | ··-·enable_strategy | ||
| 150 | ··-·low_complexity | ||
| 151 | ··-·low_disruption | ||
| 152 | ··-·medium_severity | ||
| 153 | ··-·no_reboot_needed | ||
| 154 | ··-·package_aide_installed | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | include·install_aide | 137 | include·install_aide |
| 161 | class·install_aide·{ | 138 | class·install_aide·{ |
| 162 | ··package·{·'aide': | 139 | ··package·{·'aide': |
| 163 | ····ensure·=>·'installed', | 140 | ····ensure·=>·'installed', |
| 164 | ··} | 141 | ··} |
| 165 | } | 142 | } |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | 148 | #·Remediation·is·applicable·only·in·certain·platforms |
| 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 149 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 177 | zypper·install·-y·"aide" | 150 | zypper·install·-y·"aide" |
| 178 | else | 151 | else |
| 179 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 152 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 180 | fi | 153 | fi |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | -·name:·Ensure·aide·is·installed | ||
| 164 | ··package: | ||
| 165 | ····name:·aide | ||
| 166 | ····state:·present | ||
| 167 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 168 | ··tags: | ||
| 169 | ··-·CCE-83067-9 | ||
| 170 | ··-·CJIS-5.10.1.3 | ||
| 171 | ··-·DISA-STIG-SLES-12-010499 | ||
| 172 | ··-·NIST-800-53-CM-6(a) | ||
| 173 | ··-·PCI-DSS-Req-11.5 | ||
| 174 | ··-·PCI-DSSv4-11.5.2 | ||
| 175 | ··-·enable_strategy | ||
| 176 | ··-·low_complexity | ||
| 177 | ··-·low_disruption | ||
| 178 | ··-·medium_severity | ||
| 179 | ··-·no_reboot_needed | ||
| 180 | ··-·package_aide_installed | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/bin/aide·--init | 183 | $·sudo·/usr/bin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 185 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 185 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 186 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 186 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 187 | generated·database·can·be·installed·as·follows: | 187 | generated·database·can·be·installed·as·follows: |
| Offset 212, 14 lines modified | Offset 212, 29 lines modified | ||
| 212 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 212 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 215 | ·············_\x8c_\x8i_\x8s············1.4.1 | 215 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 216 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 216 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 217 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 217 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 218 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 218 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 220 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 221 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 222 | zypper·-q·--no-remote·ref | ||
| 223 | zypper·install·-y·"aide" | ||
| Max diff block lines reached; 1022744/1028247 bytes (99.46%) of diff not shown. | |||
| Offset 14314, 15 lines modified | Offset 14314, 15 lines modified | ||
| 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037ef0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037f00:·2d31·312d·303 | 00037f00:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15135, 168 lines modified | Offset 15135, 168 lines modified | ||
| 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b1f0:·6964·6d35·3338·3922·2074·6162·696e·6465··idm5389"·tabinde | 0003b1f0:·6964·6d35·3338·3922·2074·6162·696e·6465··idm5389"·tabinde | ||
| 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b250:·656d·6564·6961·7469·6f6e·20 | 0003b250:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003b260:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b270:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b280:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b290:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b2a0:·6d35·3338·3922·3e3c·7461·626c·6520·636c··m5389"><table·cl | |||
| 0003b2b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b260:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b270:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b280:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b290:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b2a0:·646d·3533·3839·223e·3c74·6162·6c65·2063··dm5389"><table·c | |||
| 0003b2b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b2c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b2 | 0003b2c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b2d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b2e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b2f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b300:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b310:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b320:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b2e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b2f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b300:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b310:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b320:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b330:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b340:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b350:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b360:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b370:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b3 | 0003b330:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b340:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b390:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b3a0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b3b0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b3c0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b3d0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b3e0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b3f0:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b400:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b410:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b420:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b430:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b440:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b450:·6773·3a0a·2020·2d20·4343·452d·3833·3036··gs:.··-·CCE-8306 | |||
| 0003b460:·372d·390a·2020·2d20·434a·4953·2d35·2e31··7-9.··-·CJIS-5.1 | |||
| 0003b470:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b480:·5449·472d·534c·4553·2d31·322d·3031·3034··TIG-SLES-12-0104 | |||
| 0003b490:·3939·0a20·202d·204e·4953·542d·3830·302d··99.··-·NIST-800- | |||
| 0003b4a0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b4b0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b4c0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b4d0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b4e0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b4f0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b500:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b510:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b520:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b530:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b540:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b550:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b560:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b570:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b580:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b590:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b5a0:·6765·743d·2223·6964·6d35·3339·3022·2074··get="#idm5390"·t | |||
| 0003b5b0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b5c0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b5d0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b5e0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b5f0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b600:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b610:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b620:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b630:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b640:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b650:·6964·3d22·6964·6d35·3339·3022·3e3c·7461··id="idm5390"><ta | |||
| 0003b660:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b670:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b680:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b690:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b6a0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b6b0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b6c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6d0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b6e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b6f0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b700:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b710:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b720:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b | 0003b350:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b360:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b370:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b380:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b390:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b3a0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b3b0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b3c0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b3d0:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b3e0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b3f0:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b740:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b750:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| Max diff block lines reached; 7878991/7901953 bytes (99.71%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 67 lines modified | Offset 122, 67 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | -·name:·Ensure·aide·is·installed | ||
| 135 | ··package: | ||
| 136 | ····name:·aide | ||
| 137 | ····state:·present | ||
| 138 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 139 | ··tags: | ||
| 140 | ··-·CCE-83067-9 | ||
| 141 | ··-·CJIS-5.10.1.3 | ||
| 142 | ··-·DISA-STIG-SLES-12-010499 | ||
| 143 | ··-·NIST-800-53-CM-6(a) | ||
| 144 | ··-·PCI-DSS-Req-11.5 | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | ||
| 146 | ··-·enable_strategy | ||
| 147 | ··-·low_complexity | ||
| 148 | ··-·low_disruption | ||
| 149 | ··-·medium_severity | ||
| 150 | ··-·no_reboot_needed | ||
| 151 | ··-·package_aide_installed | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | include·install_aide | 134 | include·install_aide |
| 158 | class·install_aide·{ | 135 | class·install_aide·{ |
| 159 | ··package·{·'aide': | 136 | ··package·{·'aide': |
| 160 | ····ensure·=>·'installed', | 137 | ····ensure·=>·'installed', |
| 161 | ··} | 138 | ··} |
| 162 | } | 139 | } |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 145 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | zypper·install·-y·"aide" | 147 | zypper·install·-y·"aide" |
| 175 | else | 148 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 150 | fi |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | [[packages]] | ||
| 153 | name·=·"aide" | ||
| 154 | version·=·"*" | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | -·name:·Ensure·aide·is·installed | ||
| 161 | ··package: | ||
| 162 | ····name:·aide | ||
| 163 | ····state:·present | ||
| 164 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 165 | ··tags: | ||
| 166 | ··-·CCE-83067-9 | ||
| 167 | ··-·CJIS-5.10.1.3 | ||
| 168 | ··-·DISA-STIG-SLES-12-010499 | ||
| 169 | ··-·NIST-800-53-CM-6(a) | ||
| 170 | ··-·PCI-DSS-Req-11.5 | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | ||
| 172 | ··-·enable_strategy | ||
| 173 | ··-·low_complexity | ||
| 174 | ··-·low_disruption | ||
| 175 | ··-·medium_severity | ||
| 176 | ··-·no_reboot_needed | ||
| 177 | ··-·package_aide_installed | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/bin/aide·--init | 180 | $·sudo·/usr/bin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 182 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 182 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 183 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 183 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 184 | generated·database·can·be·installed·as·follows: | 184 | generated·database·can·be·installed·as·follows: |
| Offset 209, 14 lines modified | Offset 209, 29 lines modified | ||
| 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 212 | ·············_\x8c_\x8i_\x8s············1.4.1 | 212 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 219 | zypper·-q·--no-remote·ref | ||
| 220 | zypper·install·-y·"aide" | ||
| Max diff block lines reached; 993787/999300 bytes (99.45%) of diff not shown. | |||
| Offset 14313, 15 lines modified | Offset 14313, 15 lines modified | ||
| 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ef0:·206f·6620·3230·3234·2d31·312d·303 | 00037ef0:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15162, 168 lines modified | Offset 15162, 168 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3533·3839·2220·7461·6269·6e64·6578·3d22··5389"·tabindex=" | 0003b3a0:·3533·3839·2220·7461·6269·6e64·6578·3d22··5389"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20· | 0003b400:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 0003b410:· | 0003b410:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b420:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b430:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b440:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b450:·3839·223e·3c74·6162·6c65·2063·6c61·7373··89"><table·class | |||
| 0003b460:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b420:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b430:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b440:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b450:·3338·3922·3e3c·7461·626c·6520·636c·6173··389"><table·clas | |||
| 0003b460:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b470:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b4 | 0003b470:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b480:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b490:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b4a0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b4b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b4c0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b4d0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b4e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b4f0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b490:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b4a0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b4b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b4c0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b4d0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b4e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4f0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b500:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b510:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b520:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b530:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b540:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b550:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b560:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b570:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b580:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b590:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b5a0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b5b0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b5c0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b5d0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b5e0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b5f0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b600:·0a20·202d·2043·4345·2d38·3330·3637·2d39··.··-·CCE-83067-9 | |||
| 0003b610:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b620:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b630:·2d53·4c45·532d·3132·2d30·3130·3439·390a··-SLES-12-010499. | |||
| 0003b640:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b650:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b660:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b670:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b680:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b690:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b6a0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b6b0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b6c0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b6d0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b6e0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b6f0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b700:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b710:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b720:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b730:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b740:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b750:·3d22·2369·646d·3533·3930·2220·7461·6269··="#idm5390"·tabi | |||
| 0003b760:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b770:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b780:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b790:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b7a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b7b0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b7c0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b7d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b7e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b7f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b800:·2269·646d·3533·3930·223e·3c74·6162·6c65··"idm5390"><table | |||
| 0003b810:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b820:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b830:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b840:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b850:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b860:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b870:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b880:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b890:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b8a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b8b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b8c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b8d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b | 0003b500:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b510:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b520:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b530:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b540:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b550:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b560:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b570:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b580:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b590:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b5a0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b8f0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b900:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| Max diff block lines reached; 19073912/19096874 bytes (99.88%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037df0:·206f·6620·3230·3234·2d31·312d·303 | 00037df0:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15218, 306 lines modified | Offset 15218, 306 lines modified | ||
| 0003b710:·2d74·6172·6765·743d·2223·6964·6d35·3034··-target="#idm504 | 0003b710:·2d74·6172·6765·743d·2223·6964·6d35·3034··-target="#idm504 | ||
| 0003b720:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003b720:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003b730:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b730:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b740:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b740:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b750:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b750:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b760:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b760:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b770:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b770:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b780:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b790:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b7a0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b7b0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b7c0:·7073·6522·2069·643d·2269·646d·3530·3437··pse"·id="idm5047 | |||
| 0003b7d0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b7e0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b7f0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b800:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b810:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b820:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b830:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | |||
| 0003b840:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b850:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | |||
| 0003b860:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b870:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b880:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b890:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b8a0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | |||
| 0003b8b0:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | |||
| 0003b8c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b8d0:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | |||
| 0003b8e0:·743a·2050·6163·6b61·6765·206d·616e·6167··t:·Package·manag | |||
| 0003b8f0:·6572·2072·6569·6e73·7461·6c6c·2063·6f6d··er·reinstall·com | |||
| 0003b900:·6d61·6e64·270a·2020·7365·745f·6661·6374··mand'.··set_fact | |||
| 0003b910:·3a0a·2020·2020·7061·636b·6167·655f·6d61··:.····package_ma | |||
| 0003b920:·6e61·6765·725f·7265·696e·7374·616c·6c5f··nager_reinstall_ | |||
| 0003b930:·636d·643a·207a·7970·7065·7220·7265·696e··cmd:·zypper·rein | |||
| 0003b940:·7374·616c·6c20·2d79·0a20·2077·6865·6e3a··stall·-y.··when: | |||
| 0003b950:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | |||
| 0003b960:·7574·696f·6e20·696e·205b·2022·4665·646f··ution·in·[·"Fedo | |||
| 0003b970:·7261·222c·2022·5265·6448·6174·222c·2022··ra",·"RedHat",·" | |||
| 0003b980:·4365·6e74·4f53·222c·2022·4f72·6163·6c65··CentOS",·"Oracle | |||
| 0003b990:·4c69·6e75·7822·205d·0a20·2074·6167·733a··Linux"·].··tags: | |||
| 0003b9a0:·0a20·202d·2043·4345·2d39·3136·3332·2d30··.··-·CCE-91632-0 | |||
| 0003b9b0:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | |||
| 0003b9c0:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | |||
| 0003b9d0:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | |||
| 0003b9e0:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | |||
| 0003b9f0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003ba00:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | |||
| 0003ba10:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | |||
| 0003ba20:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003ba30:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | |||
| 0003ba40:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | |||
| 0003ba50:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | |||
| 0003ba60:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | |||
| 0003ba70:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | |||
| 0003ba80:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003ba90:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003baa0:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | |||
| 0003bab0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003bac0:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | |||
| 0003bad0:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | |||
| 0003bae0:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | |||
| 0003baf0:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | |||
| 0003bb00:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | |||
| 0003bb10:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | |||
| 0003bb20:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | |||
| 0003bb30:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | |||
| 0003bb40:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | |||
| 0003bb50:·6c6c·2063·6f6d·6d61·6e64·2028·7a79·7070··ll·command·(zypp | |||
| 0003bb60:·6572·2927·0a20·2073·6574·5f66·6163·743a··er)'.··set_fact: | |||
| 0003bb70:·0a20·2020·2070·6163·6b61·6765·5f6d·616e··.····package_man | |||
| 0003bb80:·6167·6572·5f72·6569·6e73·7461·6c6c·5f63··ager_reinstall_c | |||
| 0003bb90:·6d64·3a20·7a79·7070·6572·2069·6e20·2d66··md:·zypper·in·-f | |||
| 0003bba0:·202d·790a·2020·7768·656e·3a20·616e·7369···-y.··when:·ansi | |||
| 0003bbb0:·626c·655f·6469·7374·7269·6275·7469·6f6e··ble_distribution | |||
| 0003bbc0:·203d·3d20·2253·4c45·5322·0a20·2074·6167···==·"SLES".··tag | |||
| 0003bbd0:·733a·0a20·202d·2043·4345·2d39·3136·3332··s:.··-·CCE-91632 | |||
| 0003bbe0:·2d30·0a20·202d·2043·4a49·532d·352e·3130··-0.··-·CJIS-5.10 | |||
| 0003bbf0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | |||
| 0003bc00:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | |||
| 0003bc10:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | |||
| 0003bc20:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | |||
| 0003bc30:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | |||
| 0003bc40:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003bc50:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | |||
| 0003bc60:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | |||
| 0003bc70:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | |||
| 0003bc80:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003bc90:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | |||
| 0003bca0:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | |||
| 0003bcb0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003bcc0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003bcd0:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | |||
| 0003bce0:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | |||
| 0003bcf0:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | |||
| 0003bd00:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | |||
| 0003bd10:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | |||
| 0003bd20:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 0003bd30:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 0003bd40:·0a20·202d·2072·706d·5f76·6572·6966·795f··.··-·rpm_verify_ | |||
| 0003bd50:·6861·7368·6573·0a0a·2d20·6e61·6d65·3a20··hashes..-·name:· | |||
| 0003bd60:·5265·6164·2066·696c·6573·2077·6974·6820··Read·files·with· | |||
| 0003bd70:·696e·636f·7272·6563·7420·6861·7368·0a20··incorrect·hash.· | |||
| 0003bd80:·2063·6f6d·6d61·6e64·3a20·7270·6d20·2d56···command:·rpm·-V | |||
| 0003bd90:·6120·2d2d·6e6f·6465·7073·202d·2d6e·6f73··a·--nodeps·--nos | |||
| 0003bda0:·697a·6520·2d2d·6e6f·6d74·696d·6520·2d2d··ize·--nomtime·-- | |||
| 0003bdb0:·6e6f·7264·6576·202d·2d6e·6f63·6170·7320··nordev·--nocaps· | |||
| 0003bdc0:·2d2d·6e6f·6c69·6e6b·746f·202d·2d6e·6f75··--nolinkto·--nou | |||
| 0003bdd0:·7365·720a·2020·2020·2d2d·6e6f·6772·6f75··ser.····--nogrou | |||
| 0003bde0:·7020·2d2d·6e6f·6d6f·6465·202d·2d6e·6f67··p·--nomode·--nog | |||
| 0003bdf0:·686f·7374·202d·2d6e·6f63·6f6e·6669·670a··host·--noconfig. | |||
| Max diff block lines reached; 18264790/18306796 bytes (99.77%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·12 | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·12 |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 41 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 134, 14 lines modified | Offset 134, 29 lines modified | ||
| 134 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 134 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 135 | ····························A.14.2.3,·A.14.2.4 | 135 | ····························A.14.2.3,·A.14.2.4 |
| 136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 138 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 138 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 140 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 143 | get·files·names | ||
| 144 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 145 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 146 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 147 | new·line | ||
| 148 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 149 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 150 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 146 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 156 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 147 | ··set_fact: | 157 | ··set_fact: |
| Offset 273, 29 lines modified | Offset 288, 14 lines modified | ||
| 273 | ··-·PCI-DSSv4-11.5.2 | 288 | ··-·PCI-DSSv4-11.5.2 |
| 274 | ··-·high_complexity | 289 | ··-·high_complexity |
| 275 | ··-·high_severity | 290 | ··-·high_severity |
| 276 | ··-·medium_disruption | 291 | ··-·medium_disruption |
| 277 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 278 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 279 | ··-·rpm_verify_hashes | 294 | ··-·rpm_verify_hashes |
| 280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 281 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 282 | get·files·names | ||
| 283 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 284 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 285 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 286 | new·line | ||
| 287 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 288 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 289 | fi | ||
| 290 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 291 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 296 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 292 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 297 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 293 | which·can·be·found·with: | 298 | which·can·be·found·with: |
| 294 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 299 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 295 | run·the·following·command·to·determine·which·package·owns·it: | 300 | run·the·following·command·to·determine·which·package·owns·it: |
| 296 | $·rpm·-qf·FILENAME | 301 | $·rpm·-qf·FILENAME |
| Offset 377, 14 lines modified | Offset 377, 46 lines modified | ||
| 377 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 377 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 378 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 378 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 379 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 379 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 380 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 380 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 381 | ····························SRG-OS-000278-GPOS-00108 | 381 | ····························SRG-OS-000278-GPOS-00108 |
| 382 | ·············_\x8c_\x8i_\x8s············6.1.1 | 382 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 383 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 383 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 385 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 386 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 387 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 388 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 389 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 390 | declare·-A·SETPERMS_RPM_DICT | ||
| 391 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 392 | #·is·expected·by·the·RPM·database | ||
| 393 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 394 | $NF·}') | ||
| 395 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 396 | do | ||
| 397 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 398 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 399 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 400 | ········do | ||
| 401 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 402 | duplicates. | ||
| 403 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 404 | ········done | ||
| 405 | done | ||
| 406 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 407 | #·correct·values | ||
| 408 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 409 | do | ||
| 410 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 411 | done | ||
| 384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 412 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 385 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 413 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 386 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 414 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 387 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 415 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 388 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 416 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 389 | -·name:·Read·list·of·files·with·incorrect·permissions | 417 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 390 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 418 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 465, 46 lines modified | Offset 497, 14 lines modified | ||
| 465 | ··-·PCI-DSSv4-11.5.2 | 497 | ··-·PCI-DSSv4-11.5.2 |
| 466 | ··-·high_complexity | 498 | ··-·high_complexity |
| 467 | ··-·high_severity | 499 | ··-·high_severity |
| 468 | ··-·medium_disruption | 500 | ··-·medium_disruption |
| Max diff block lines reached; 1448361/1454562 bytes (99.57%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037d90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037da0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037da0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037db0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037db0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037dc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037dc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037dd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037dd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037de0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037de0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037df0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037df0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e00:·3234·2d31·312d·303 | 00037e00:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00037e10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037e30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037e30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037e40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037e40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037e50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037e50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037e60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037e60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037e70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037e70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15163, 306 lines modified | Offset 15163, 306 lines modified | ||
| 0003b3a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b3a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b3b0:·6964·6d35·3034·3722·2074·6162·696e·6465··idm5047"·tabinde | 0003b3b0:·6964·6d35·3034·3722·2074·6162·696e·6465··idm5047"·tabinde | ||
| 0003b3c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b3c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b3d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b3d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b3e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b3e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b3f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b3f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b400:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b400:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b410:·656d·6564·6961·7469·6f6e·20 | 0003b410:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003b420:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b430:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b440:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b450:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b460:·3034·3722·3e3c·7072·653e·3c63·6f64·653e··047"><pre><code> | |||
| 0003b470:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | |||
| 0003b480:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | |||
| 0003b490:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | |||
| 0003b4a0:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | |||
| 0003b4b0:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | |||
| 0003b4c0:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | |||
| 0003b4d0:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | |||
| 0003b4e0:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | |||
| 0003b4f0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | |||
| 0003b500:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | |||
| 0003b510:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | |||
| 0003b520:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | |||
| 0003b530:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | |||
| 0003b540:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | |||
| 0003b550:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | |||
| 0003b560:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | |||
| 0003b570:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | |||
| 0003b580:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | |||
| 0003b590:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | |||
| 0003b5a0:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | |||
| 0003b5b0:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | |||
| 0003b5c0:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | |||
| 0003b5d0:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | |||
| 0003b5e0:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | |||
| 0003b5f0:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | |||
| 0003b600:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | |||
| 0003b610:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | |||
| 0003b620:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | |||
| 0003b630:·2922·0a0a·2020·2020·0a20·2020·207a·7970··)"..····.····zyp | |||
| 0003b640:·7065·7220·696e·7374·616c·6c20·2d66·202d··per·install·-f·- | |||
| 0003b650:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | |||
| 0003b660:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | |||
| 0003b670:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b680:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b690:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b6a0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b6b0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b6c0:·743d·2223·6964·6d35·3034·3822·2074·6162··t="#idm5048"·tab | |||
| 0003b6d0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b6e0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b6f0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b700:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b710:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b720:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b | 0003b730:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003b43 | 0003b740:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b | 0003b750:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b | 0003b760:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b | 0003b770:·643d·2269·646d·3530·3438·223e·3c74·6162··d="idm5048"><tab | ||
| 0003b | 0003b780:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b | 0003b790:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b | 0003b7a0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b | 0003b7b0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003b | 0003b7c0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003b | 0003b7d0:·3a3c·2f74·683e·3c74·643e·6869·6768·3c2f··:</th><td>high</ | ||
| 0003b7e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b7f0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b800:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | |||
| 0003b | 0003b810:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b4e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b4f0:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | |||
| 0003b500:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b | 0003b820:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b | 0003b830:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003b840:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b54 | 0003b850:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | ||
| 0003b | 0003b860:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b | 0003b870:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 0003b570:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | |||
| 0003b580:·206d·616e·6167·6572·2072·6569·6e73·7461···manager·reinsta | |||
| 0003b590:·6c6c·2063·6f6d·6d61·6e64·270a·2020·7365··ll·command'.··se | |||
| 0003b5a0:·745f·6661·6374·3a0a·2020·2020·7061·636b··t_fact:.····pack | |||
| 0003b5b0:·6167·655f·6d61·6e61·6765·725f·7265·696e··age_manager_rein | |||
| 0003b5c0:·7374·616c·6c5f·636d·643a·207a·7970·7065··stall_cmd:·zyppe | |||
| 0003b5d0:·7220·7265·696e·7374·616c·6c20·2d79·0a20··r·reinstall·-y.· | |||
| 0003b5e0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f64···when:·ansible_d | |||
| 0003b5f0:·6973·7472·6962·7574·696f·6e20·696e·205b··istribution·in·[ | |||
| 0003b600:·2022·4665·646f·7261·222c·2022·5265·6448···"Fedora",·"RedH | |||
| 0003b610:·6174·222c·2022·4365·6e74·4f53·222c·2022··at",·"CentOS",·" | |||
| 0003b620:·4f72·6163·6c65·4c69·6e75·7822·205d·0a20··OracleLinux"·].· | |||
| 0003b630:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b640:·3136·3332·2d30·0a20·202d·2043·4a49·532d··1632-0.··-·CJIS- | |||
| 0003b650:·352e·3130·2e34·2e31·0a20·202d·204e·4953··5.10.4.1.··-·NIS | |||
| 0003b660:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | |||
| 0003b670:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003b680:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | |||
| 0003b690:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | |||
| 0003b6a0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b6b0:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | |||
| 0003b6c0:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | |||
| 0003b6d0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003b6e0:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | |||
| 0003b6f0:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | |||
| 0003b700:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | |||
| 0003b710:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | |||
| 0003b720:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b730:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b740:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | |||
| Max diff block lines reached; 16999780/17041786 bytes (99.75%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·for·SUSE·Linux·enterprise·12 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·for·SUSE·Linux·enterprise·12 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 124, 14 lines modified | Offset 124, 29 lines modified | ||
| 124 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 124 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 125 | ····························A.14.2.3,·A.14.2.4 | 125 | ····························A.14.2.3,·A.14.2.4 |
| 126 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 126 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 127 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 127 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 133 | get·files·names | ||
| 134 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 135 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 136 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 137 | new·line | ||
| 138 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 139 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 140 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 136 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 146 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 137 | ··set_fact: | 147 | ··set_fact: |
| Offset 263, 29 lines modified | Offset 278, 14 lines modified | ||
| 263 | ··-·PCI-DSSv4-11.5.2 | 278 | ··-·PCI-DSSv4-11.5.2 |
| 264 | ··-·high_complexity | 279 | ··-·high_complexity |
| 265 | ··-·high_severity | 280 | ··-·high_severity |
| 266 | ··-·medium_disruption | 281 | ··-·medium_disruption |
| 267 | ··-·no_reboot_needed | 282 | ··-·no_reboot_needed |
| 268 | ··-·restrict_strategy | 283 | ··-·restrict_strategy |
| 269 | ··-·rpm_verify_hashes | 284 | ··-·rpm_verify_hashes |
| 270 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 271 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 272 | get·files·names | ||
| 273 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 274 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 275 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 276 | new·line | ||
| 277 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 278 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 279 | fi | ||
| 280 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 285 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 281 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 286 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 282 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 287 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 283 | which·can·be·found·with: | 288 | which·can·be·found·with: |
| 284 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 289 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 285 | run·the·following·command·to·determine·which·package·owns·it: | 290 | run·the·following·command·to·determine·which·package·owns·it: |
| 286 | $·rpm·-qf·FILENAME | 291 | $·rpm·-qf·FILENAME |
| Offset 367, 14 lines modified | Offset 367, 46 lines modified | ||
| 367 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 367 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 368 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 368 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 369 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 369 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 370 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 370 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 371 | ····························SRG-OS-000278-GPOS-00108 | 371 | ····························SRG-OS-000278-GPOS-00108 |
| 372 | ·············_\x8c_\x8i_\x8s············6.1.1 | 372 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 373 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 373 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 379 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 380 | declare·-A·SETPERMS_RPM_DICT | ||
| 381 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 382 | #·is·expected·by·the·RPM·database | ||
| 383 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 384 | $NF·}') | ||
| 385 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 386 | do | ||
| 387 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 388 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 389 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 390 | ········do | ||
| 391 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 392 | duplicates. | ||
| 393 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 394 | ········done | ||
| 395 | done | ||
| 396 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 397 | #·correct·values | ||
| 398 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 399 | do | ||
| 400 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 401 | done | ||
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 402 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 403 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 404 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 405 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 406 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 379 | -·name:·Read·list·of·files·with·incorrect·permissions | 407 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 380 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 408 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 455, 46 lines modified | Offset 487, 14 lines modified | ||
| 455 | ··-·PCI-DSSv4-11.5.2 | 487 | ··-·PCI-DSSv4-11.5.2 |
| 456 | ··-·high_complexity | 488 | ··-·high_complexity |
| 457 | ··-·high_severity | 489 | ··-·high_severity |
| 458 | ··-·medium_disruption | 490 | ··-·medium_disruption |
| Max diff block lines reached; 1290954/1297157 bytes (99.52%) of diff not shown. | |||
| Offset 14305, 15 lines modified | Offset 14305, 15 lines modified | ||
| 00037e00:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037e00:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037e10:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037e10:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e20:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e20:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e30:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e30:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e40:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e40:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e60:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | 00037e60:·2020·2028·6173·206f·6620·3230·3234·2d31·····(as·of·2024-1 | ||
| 00037e70:·312d·303 | 00037e70:·312d·3037·290a·2020·2020·2020·2020·2020··1-07).·········· | ||
| 00037e80:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e80:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e90:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e90:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037ea0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037ea0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037eb0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037eb0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037ec0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037ec0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037ed0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037ed0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ee0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ee0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 14954, 117 lines modified | Offset 14954, 117 lines modified | ||
| 0003a690:·6574·3d22·2369·646d·3234·3536·3022·2074··et="#idm24560"·t | 0003a690:·6574·3d22·2369·646d·3234·3536·3022·2074··et="#idm24560"·t | ||
| 0003a6a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003a6a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003a6b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003a6b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003a6c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003a6c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003a6d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003a6d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003a6e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003a6e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003a6f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003a6f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003a700:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003a710:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a720:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003a730:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003a700:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003a710:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003a720:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003a730:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a740:·2069·643d·2269·646d·3234·3536·3022·3e3c···id="idm24560">< | |||
| 0003a750:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003a760:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003a770:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003a780:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003a790:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003a7a0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003a7b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a7c0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003a7d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003a7e0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003a7f0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003a800:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a810:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003a820:·3c74·643e·636f·6e66·6967·7572·653c·2f74··<td>configure</t | |||
| 0003a830:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003a840:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003a850:·3a20·5465·7374·2066·6f72·2065·7869·7374··:·Test·for·exist | |||
| 0003a860:·656e·6365·202f·6574·632f·7061·7373·7764··ence·/etc/passwd | |||
| 0003a870:·0a20·2073·7461·743a·0a20·2020·2070·6174··.··stat:.····pat | |||
| 0003a880:·683a·202f·6574·632f·7061·7373·7764·0a20··h:·/etc/passwd.· | |||
| 0003a890:·2072·6567·6973·7465·723a·2066·696c·655f···register:·file_ | |||
| 0003a8a0:·6578·6973·7473·0a20·2074·6167·733a·0a20··exists.··tags:.· | |||
| 0003a8b0:·202d·2043·4345·2d39·3136·3237·2d30·0a20···-·CCE-91627-0.· | |||
| 0003a8c0:·202d·2043·4a49·532d·352e·352e·322e·320a···-·CJIS-5.5.2.2. | |||
| 0003a8d0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003a8e0:·4143·2d36·2831·290a·2020·2d20·4e49·5354··AC-6(1).··-·NIST | |||
| 0003a8f0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003a900:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003a910:·382e·372e·630a·2020·2d20·5043·492d·4453··8.7.c.··-·PCI-DS | |||
| 0003a920:·5376·342d·322e·322e·360a·2020·2d20·636f··Sv4-2.2.6.··-·co | |||
| 0003a930:·6e66·6967·7572·655f·7374·7261·7465·6779··nfigure_strategy | |||
| 0003a940:·0a20·202d·2066·696c·655f·6772·6f75·706f··.··-·file_groupo | |||
| 0003a950:·776e·6572·5f65·7463·5f70·6173·7377·640a··wner_etc_passwd. | |||
| 0003a960:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003a970:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003a980:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003a990:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003a9a0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a0a··_reboot_needed.. | |||
| 0003a9b0:·2d20·6e61·6d65·3a20·456e·7375·7265·2067··-·name:·Ensure·g | |||
| 0003a9c0:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | |||
| 0003a9d0:·2f65·7463·2f70·6173·7377·640a·2020·6669··/etc/passwd.··fi | |||
| 0003a9e0:·6c65·3a0a·2020·2020·7061·7468·3a20·2f65··le:.····path:·/e | |||
| 0003a9f0:·7463·2f70·6173·7377·640a·2020·2020·6772··tc/passwd.····gr | |||
| 0003aa00:·6f75·703a·2027·3027·0a20·2077·6865·6e3a··oup:·'0'.··when: | |||
| 0003aa10:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | |||
| 0003aa20:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | |||
| 0003aa30:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | |||
| 0003aa40:·742e·6578·6973·7473·0a20·2074·6167·733a··t.exists.··tags: | |||
| 0003aa50:·0a20·202d·2043·4345·2d39·3136·3237·2d30··.··-·CCE-91627-0 | |||
| 0003aa60:·0a20·202d·2043·4a49·532d·352e·352e·322e··.··-·CJIS-5.5.2. | |||
| 0003aa70:·320a·2020·2d20·4e49·5354·2d38·3030·2d35··2.··-·NIST-800-5 | |||
| 0003aa80:·332d·4143·2d36·2831·290a·2020·2d20·4e49··3-AC-6(1).··-·NI | |||
| 0003aa90:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003aaa0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003aab0:·712d·382e·372e·630a·2020·2d20·5043·492d··q-8.7.c.··-·PCI- | |||
| 0003aac0:·4453·5376·342d·322e·322e·360a·2020·2d20··DSSv4-2.2.6.··-· | |||
| 0003aad0:·636f·6e66·6967·7572·655f·7374·7261·7465··configure_strate | |||
| 0003aae0:·6779·0a20·202d·2066·696c·655f·6772·6f75··gy.··-·file_grou | |||
| 0003aaf0:·706f·776e·6572·5f65·7463·5f70·6173·7377··powner_etc_passw | |||
| 0003ab00:·640a·2020·2d20·6c6f·775f·636f·6d70·6c65··d.··-·low_comple | |||
| 0003ab10:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003ab20:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003ab30:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003ab40:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003ab50:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ab60:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ab70:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ab80:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ab90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003a | 0003a740:·3d22·6964·6d32·3435·3630·223e·3c74·6162··="idm24560"><tab | ||
| 0003abb0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003abc0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003abd0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003abe0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003abf0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003ac00:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003a | 0003a750:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003a760:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003a770:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003a780:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003a790:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a7a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a7b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a7c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a7d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a7e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003a7f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a800:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003a810:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003a820:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | |||
| 0003a830:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003a840:·3e3c·636f·6465·3e63·6867·7270·202d·4c20··><code>chgrp·-L· | |||
| 0003a850:·3020·2f65·7463·2f70·6173·7377·640a·3c2f··0·/etc/passwd.</ | |||
| 0003a860:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003a870:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| Max diff block lines reached; 31382/47306 bytes (66.34%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·12 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·12 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 43 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 44 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 44 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Group ·Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12· Group | 52 | Group ·Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12· Group |
| 53 | contains·4·groups·and·3·rules | 53 | contains·4·groups·and·3·rules |
| 54 | Group ·System·Settings· Group·contains·3·groups·and·3·rules | 54 | Group ·System·Settings· Group·contains·3·groups·and·3·rules |
| Offset 107, 14 lines modified | Offset 107, 20 lines modified | ||
| 107 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 107 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 108 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 108 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 111 | ·············_\x8c_\x8i_\x8s············6.1.2 | 111 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 |
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 119 | chgrp·-L·0·/etc/passwd | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 119 | -·name:·Test·for·existence·/etc/passwd | 125 | -·name:·Test·for·existence·/etc/passwd |
| 120 | ··stat: | 126 | ··stat: |
| Offset 148, 20 lines modified | Offset 154, 14 lines modified | ||
| 148 | ··-·PCI-DSSv4-2.2.6 | 154 | ··-·PCI-DSSv4-2.2.6 |
| 149 | ··-·configure_strategy | 155 | ··-·configure_strategy |
| 150 | ··-·file_groupowner_etc_passwd | 156 | ··-·file_groupowner_etc_passwd |
| 151 | ··-·low_complexity | 157 | ··-·low_complexity |
| 152 | ··-·low_disruption | 158 | ··-·low_disruption |
| 153 | ··-·medium_severity | 159 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 160 | ··-·no_reboot_needed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 160 | chgrp·-L·0·/etc/passwd | ||
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: | 162 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: |
| 163 | $·sudo·chown·root·/etc/passwd | 163 | $·sudo·chown·root·/etc/passwd |
| 164 | ·············The·/etc/passwd·file·contains·information·about·the·users·that·are | 164 | ·············The·/etc/passwd·file·contains·information·about·the·users·that·are |
| 165 | Rationale:···configured·on·the·system.·Protection·of·this·file·is·critical·for | 165 | Rationale:···configured·on·the·system.·Protection·of·this·file·is·critical·for |
| 166 | ·············system·security. | 166 | ·············system·security. |
| 167 | Severity: ···medium | 167 | Severity: ···medium |
| Offset 184, 14 lines modified | Offset 184, 20 lines modified | ||
| 184 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 184 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 185 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 185 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 186 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 186 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 187 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 187 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 188 | ·············_\x8c_\x8i_\x8s············6.1.2 | 188 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 189 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 189 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 190 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 | 190 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 |
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 196 | chown·-L·0·/etc/passwd | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 196 | -·name:·Test·for·existence·/etc/passwd | 202 | -·name:·Test·for·existence·/etc/passwd |
| 197 | ··stat: | 203 | ··stat: |
| Offset 225, 20 lines modified | Offset 231, 14 lines modified | ||
| 225 | ··-·PCI-DSSv4-2.2.6 | 231 | ··-·PCI-DSSv4-2.2.6 |
| 226 | ··-·configure_strategy | 232 | ··-·configure_strategy |
| 227 | ··-·file_owner_etc_passwd | 233 | ··-·file_owner_etc_passwd |
| 228 | ··-·low_complexity | 234 | ··-·low_complexity |
| 229 | ··-·low_disruption | 235 | ··-·low_disruption |
| 230 | ··-·medium_severity | 236 | ··-·medium_severity |
| 231 | ··-·no_reboot_needed | 237 | ··-·no_reboot_needed |
| 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 233 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 234 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 235 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 236 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 237 | chown·-L·0·/etc/passwd | ||
| 238 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 238 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 239 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: | 239 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: |
| 240 | $·sudo·chmod·0644·/etc/passwd | 240 | $·sudo·chmod·0644·/etc/passwd |
| 241 | ·············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world | 241 | ·············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world |
| 242 | Rationale:···the·risk·of·its·compromise·is·increased.·The·file·contains·the | 242 | Rationale:···the·risk·of·its·compromise·is·increased.·The·file·contains·the |
| 243 | ·············list·of·accounts·on·the·system·and·associated·information,·and | 243 | ·············list·of·accounts·on·the·system·and·associated·information,·and |
| 244 | ·············protection·of·this·file·is·critical·for·system·security. | 244 | ·············protection·of·this·file·is·critical·for·system·security. |
| Offset 262, 14 lines modified | Offset 262, 25 lines modified | ||
| 262 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 262 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 263 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 263 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 264 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 264 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 265 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 265 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 266 | ·············_\x8c_\x8i_\x8s············6.1.2 | 266 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 267 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 267 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 268 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 | 268 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6 |
| 269 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 270 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 271 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 272 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 273 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 274 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 269 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 270 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 271 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 272 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 273 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 274 | -·name:·Test·for·existence·/etc/passwd | 280 | -·name:·Test·for·existence·/etc/passwd |
| 275 | ··stat: | 281 | ··stat: |
| Offset 303, 22 lines modified | Offset 314, 11 lines modified | ||
| 303 | ··-·PCI-DSSv4-2.2.6 | 314 | ··-·PCI-DSSv4-2.2.6 |
| Max diff block lines reached; 675/6479 bytes (10.42%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037df0:·6173·206f·6620·3230·3234·2d31·312d·303 | 00037df0:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15107, 168 lines modified | Offset 15107, 168 lines modified | ||
| 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b030:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | 0003b030:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | ||
| 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b090:·6d65·6469·6174·696f·6e20· | 0003b090:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | ||
| 0003b0a0:· | 0003b0a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b0b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b0c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b0d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b0e0:·3533·3839·223e·3c74·6162·6c65·2063·6c61··5389"><table·cla | |||
| 0003b0f0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b0b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b0d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0e0:·6d35·3338·3922·3e3c·7461·626c·6520·636c··m5389"><table·cl | |||
| 0003b0f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b100:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b1 | 0003b100:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b110:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b120:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b130:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b140:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b150:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b160:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b120:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b130:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b140:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b150:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b160:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b170:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b180:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b190:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b1a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b1b0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b1 | 0003b170:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b180:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b1d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b1e0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b1f0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b200:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b210:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b220:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b230:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b240:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b250:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b260:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b270:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b280:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b290:·733a·0a20·202d·2043·4345·2d38·3330·3637··s:.··-·CCE-83067 | |||
| 0003b2a0:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b2b0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b2c0:·4947·2d53·4c45·532d·3132·2d30·3130·3439··IG-SLES-12-01049 | |||
| 0003b2d0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b2e0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b2f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b300:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b310:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b320:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b330:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b340:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b350:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b360:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b370:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b380:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b390:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b3a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b3b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b3c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b3d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b3e0:·6574·3d22·2369·646d·3533·3930·2220·7461··et="#idm5390"·ta | |||
| 0003b3f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b400:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b410:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b420:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b430:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b440:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b450:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b460:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b470:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b480:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b490:·643d·2269·646d·3533·3930·223e·3c74·6162··d="idm5390"><tab | |||
| 0003b4a0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b4b0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b4c0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b4d0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b4e0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b4f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b500:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b510:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b520:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b530:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b540:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b550:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b560:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b | 0003b190:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b1a0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b1b0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b1c0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b1d0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b1e0:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b1f0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b200:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b210:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b220:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b230:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b580:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b590:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b5a0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| Max diff block lines reached; 19730378/19753340 bytes (99.88%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·12 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·12 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 114, 67 lines modified | Offset 114, 67 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 117 | ·············_\x8c_\x8i_\x8s············1.4.1 | 117 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | -·name:·Ensure·aide·is·installed | ||
| 127 | ··package: | ||
| 128 | ····name:·aide | ||
| 129 | ····state:·present | ||
| 130 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 131 | ··tags: | ||
| 132 | ··-·CCE-83067-9 | ||
| 133 | ··-·CJIS-5.10.1.3 | ||
| 134 | ··-·DISA-STIG-SLES-12-010499 | ||
| 135 | ··-·NIST-800-53-CM-6(a) | ||
| 136 | ··-·PCI-DSS-Req-11.5 | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | ||
| 138 | ··-·enable_strategy | ||
| 139 | ··-·low_complexity | ||
| 140 | ··-·low_disruption | ||
| 141 | ··-·medium_severity | ||
| 142 | ··-·no_reboot_needed | ||
| 143 | ··-·package_aide_installed | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | include·install_aide | 126 | include·install_aide |
| 150 | class·install_aide·{ | 127 | class·install_aide·{ |
| 151 | ··package·{·'aide': | 128 | ··package·{·'aide': |
| 152 | ····ensure·=>·'installed', | 129 | ····ensure·=>·'installed', |
| 153 | ··} | 130 | ··} |
| 154 | } | 131 | } |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | 137 | #·Remediation·is·applicable·only·in·certain·platforms |
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 138 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 166 | zypper·install·-y·"aide" | 139 | zypper·install·-y·"aide" |
| 167 | else | 140 | else |
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 141 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169 | fi | 142 | fi |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | [[packages]] | ||
| 145 | name·=·"aide" | ||
| 146 | version·=·"*" | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | -·name:·Ensure·aide·is·installed | ||
| 153 | ··package: | ||
| 154 | ····name:·aide | ||
| 155 | ····state:·present | ||
| 156 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 157 | ··tags: | ||
| 158 | ··-·CCE-83067-9 | ||
| 159 | ··-·CJIS-5.10.1.3 | ||
| 160 | ··-·DISA-STIG-SLES-12-010499 | ||
| 161 | ··-·NIST-800-53-CM-6(a) | ||
| 162 | ··-·PCI-DSS-Req-11.5 | ||
| 163 | ··-·PCI-DSSv4-11.5.2 | ||
| 164 | ··-·enable_strategy | ||
| 165 | ··-·low_complexity | ||
| 166 | ··-·low_disruption | ||
| 167 | ··-·medium_severity | ||
| 168 | ··-·no_reboot_needed | ||
| 169 | ··-·package_aide_installed | ||
| 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 171 | Run·the·following·command·to·generate·a·new·database: | 171 | Run·the·following·command·to·generate·a·new·database: |
| 172 | $·sudo·/usr/bin/aide·--init | 172 | $·sudo·/usr/bin/aide·--init |
| 173 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 173 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 174 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 174 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 175 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 175 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 176 | generated·database·can·be·installed·as·follows: | 176 | generated·database·can·be·installed·as·follows: |
| Offset 201, 14 lines modified | Offset 201, 29 lines modified | ||
| 201 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 201 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 202 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 202 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 203 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 203 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 204 | ·············_\x8c_\x8i_\x8s············1.4.1 | 204 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 205 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 205 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 206 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 206 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 207 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 207 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 209 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 210 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 211 | zypper·-q·--no-remote·ref | ||
| 212 | zypper·install·-y·"aide" | ||
| Max diff block lines reached; 1475279/1480752 bytes (99.63%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380d0:·7320·6f66·2032·3032·342d·3131·2d30·3 | 000380d0:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15134, 167 lines modified | Offset 15134, 167 lines modified | ||
| 0003b1d0:·7461·7267·6574·3d22·2369·646d·3633·3332··target="#idm6332 | 0003b1d0:·7461·7267·6574·3d22·2369·646d·3633·3332··target="#idm6332 | ||
| 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b240:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b250:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b260:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b270:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b280:·6522·2069·643d·2269·646d·3633·3332·223e··e"·id="idm6332"> | |||
| 0003b290:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b2a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b240:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b250:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b260:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b270:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b280:·7365·2220·6964·3d22·6964·6d36·3333·3222··se"·id="idm6332" | |||
| 0003b290:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b2a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b2b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b2 | 0003b2b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b2d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b2 | 0003b2c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b2d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b2e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b2f0:· | 0003b2f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b300:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b310:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b320:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b330:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b300:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b310:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b320:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b330:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b340:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b350:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b360:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b370:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b380:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b390:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b3a0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b3b0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b3c0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b3d0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b3e0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b3f0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b400:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b410:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b420:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b430:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b440:·2043·4345·2d38·3332·3839·2d39·0a20·202d···CCE-83289-9.··- | |||
| 0003b450:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b460:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b470:·532d·3135·2d30·3130·3431·390a·2020·2d20··S-15-010419.··-· | |||
| 0003b480:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b490:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b4a0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b4b0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b4c0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b4d0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b4e0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b4f0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b500:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b510:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b520:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b530:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b540:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b550:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b560:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b570:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b580:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b590:·646d·3633·3333·2220·7461·6269·6e64·6578··dm6333"·tabindex | |||
| 0003b5a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b5b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b5c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b5d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b5e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b5f0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b600:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b610:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b620:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b630:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b640:·3633·3333·223e·3c74·6162·6c65·2063·6c61··6333"><table·cla | |||
| 0003b650:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b660:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b670:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b680:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b690:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b6a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b6b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b6c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b6d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b6e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b6f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b700:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b710:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b | 0003b340:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b | 0003b350:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b360:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b370:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b380:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b390:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b | 0003b3a0:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | ||
| 0003b3b0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b3c0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b3d0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b3e0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b750:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b760:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| Max diff block lines reached; 20137511/20160335 bytes (99.89%) of diff not shown. | |||
| Offset 14342, 15 lines modified | Offset 14342, 15 lines modified | ||
| 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380c0:·7320·6f66·2032·3032·342d·3131·2d30·3 | 000380c0:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15139, 168 lines modified | Offset 15139, 168 lines modified | ||
| 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | ||
| 0003b230:·3333·3222·2074·6162·696e·6465·783d·2230··332"·tabindex="0 | 0003b230:·3333·3222·2074·6162·696e·6465·783d·2230··332"·tabindex="0 | ||
| 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b290:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b2a0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b2b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b2c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b2d0:·6170·7365·2220·6964·3d22·6964·6d36·3333··apse"·id="idm633 | |||
| 0003b2e0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b2f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b290:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b2a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b2b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b2c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b2d0:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b2e0:·3332·223e·3c74·6162·6c65·2063·6c61·7373··32"><table·class | |||
| 0003b2f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b300:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b3 | 0003b300:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b310:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b320:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b330:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b340:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b350:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b360:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b370:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b380:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b320:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b330:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b340:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b350:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b360:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b370:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b380:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b390:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b3a0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b3b0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b3c0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b3d0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b3e0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b3f0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b400:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b410:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b420:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b430:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b440:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b450:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b460:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b470:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b480:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b490:·2020·2d20·4343·452d·3833·3238·392d·390a····-·CCE-83289-9. | |||
| 0003b4a0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b4b0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b4c0:·534c·4553·2d31·352d·3031·3034·3139·0a20··SLES-15-010419.· | |||
| 0003b4d0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b4e0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b4f0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b500:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b510:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b520:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b530:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b540:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b550:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b560:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b570:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b580:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b590:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b5a0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b5b0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b5c0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b5d0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b5e0:·2223·6964·6d36·3333·3322·2074·6162·696e··"#idm6333"·tabin | |||
| 0003b5f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b600:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b610:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b620:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b630:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b640:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b650:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b660:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b670:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b680:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b690:·6964·6d36·3333·3322·3e3c·7461·626c·6520··idm6333"><table· | |||
| 0003b6a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b6b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b6c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b6d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b6e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b6f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b700:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b710:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b720:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b730:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b740:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b750:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b760:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b | 0003b390:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b3a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b3b0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b3c0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b3d0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b3e0:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b3f0:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b400:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 0003b410:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b420:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b430:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| Max diff block lines reached; 20449883/20472845 bytes (99.89%) of diff not shown. | |||
| Offset 14344, 15 lines modified | Offset 14344, 15 lines modified | ||
| 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380e0:·7320·6f66·2032·3032·342d·3131·2d30·3 | 000380e0:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15125, 167 lines modified | Offset 15125, 167 lines modified | ||
| 0003b140:·2d74·6172·6765·743d·2223·6964·6d36·3333··-target="#idm633 | 0003b140:·2d74·6172·6765·743d·2223·6964·6d36·3333··-target="#idm633 | ||
| 0003b150:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003b150:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b1b0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b1c0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b1d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b1e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b1f0:·7365·2220·6964·3d22·6964·6d36·3333·3222··se"·id="idm6332" | |||
| 0003b200:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b210:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b1b0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b1c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b1d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b1e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b1f0:·7073·6522·2069·643d·2269·646d·3633·3332··pse"·id="idm6332 | |||
| 0003b200:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b210:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b220:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b2 | 0003b220:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b230:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b240:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b250:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b260:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b270:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b280:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b290:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b2a0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b240:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b250:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b260:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b270:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b280:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b290:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b2a0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b2b0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b2c0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b2d0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b2e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b2f0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b300:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b310:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b320:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b330:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b340:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b350:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b360:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b370:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b380:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b390:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b3a0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b3b0:·2d20·4343·452d·3833·3238·392d·390a·2020··-·CCE-83289-9.·· | |||
| 0003b3c0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b3d0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b3e0:·4553·2d31·352d·3031·3034·3139·0a20·202d··ES-15-010419.··- | |||
| 0003b3f0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b400:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b410:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b420:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b430:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b440:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b450:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b460:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b470:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b480:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b490:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b4a0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b4b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b4c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b4d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b4e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b4f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b500:·6964·6d36·3333·3322·2074·6162·696e·6465··idm6333"·tabinde | |||
| 0003b510:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b520:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b530:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b540:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b550:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b560:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b570:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b580:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b590:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b5a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b5b0:·6d36·3333·3322·3e3c·7461·626c·6520·636c··m6333"><table·cl | |||
| 0003b5c0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b5d0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b5e0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b5f0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b600:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b610:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b620:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b630:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b640:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b650:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b660:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b670:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b680:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b | 0003b2b0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b2c0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b2d0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b2e0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b2f0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b300:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b310:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b320:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b330:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b340:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b350:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| Max diff block lines reached; 7777799/7800623 bytes (99.71%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 122, 67 lines modified | Offset 122, 67 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | -·name:·Ensure·aide·is·installed | ||
| 135 | ··package: | ||
| 136 | ····name:·aide | ||
| 137 | ····state:·present | ||
| 138 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 139 | ··tags: | ||
| 140 | ··-·CCE-83289-9 | ||
| 141 | ··-·CJIS-5.10.1.3 | ||
| 142 | ··-·DISA-STIG-SLES-15-010419 | ||
| 143 | ··-·NIST-800-53-CM-6(a) | ||
| 144 | ··-·PCI-DSS-Req-11.5 | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | ||
| 146 | ··-·enable_strategy | ||
| 147 | ··-·low_complexity | ||
| 148 | ··-·low_disruption | ||
| 149 | ··-·medium_severity | ||
| 150 | ··-·no_reboot_needed | ||
| 151 | ··-·package_aide_installed | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | include·install_aide | 134 | include·install_aide |
| 158 | class·install_aide·{ | 135 | class·install_aide·{ |
| 159 | ··package·{·'aide': | 136 | ··package·{·'aide': |
| 160 | ····ensure·=>·'installed', | 137 | ····ensure·=>·'installed', |
| 161 | ··} | 138 | ··} |
| 162 | } | 139 | } |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 145 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | zypper·install·-y·"aide" | 147 | zypper·install·-y·"aide" |
| 175 | else | 148 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 150 | fi |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | [[packages]] | ||
| 153 | name·=·"aide" | ||
| 154 | version·=·"*" | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | -·name:·Ensure·aide·is·installed | ||
| 161 | ··package: | ||
| 162 | ····name:·aide | ||
| 163 | ····state:·present | ||
| 164 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 165 | ··tags: | ||
| 166 | ··-·CCE-83289-9 | ||
| 167 | ··-·CJIS-5.10.1.3 | ||
| 168 | ··-·DISA-STIG-SLES-15-010419 | ||
| 169 | ··-·NIST-800-53-CM-6(a) | ||
| 170 | ··-·PCI-DSS-Req-11.5 | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | ||
| 172 | ··-·enable_strategy | ||
| 173 | ··-·low_complexity | ||
| 174 | ··-·low_disruption | ||
| 175 | ··-·medium_severity | ||
| 176 | ··-·no_reboot_needed | ||
| 177 | ··-·package_aide_installed | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/bin/aide·--init | 180 | $·sudo·/usr/bin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 209, 14 lines modified | Offset 209, 29 lines modified | ||
| 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 212 | ·············_\x8c_\x8i_\x8s············1.4.1 | 212 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 219 | zypper·-q·--no-remote·ref | ||
| 220 | zypper·install·-y·"aide" | ||
| Max diff block lines reached; 920554/926145 bytes (99.40%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 000380d0:·2032·3032·342d·3131·2d30·3 | 000380d0:·2032·3032·342d·3131·2d30·3729·0a20·2020···2024-11-07).··· | ||
| 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14793, 146 lines modified | Offset 14793, 146 lines modified | ||
| 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3839··-target="#idm889 | 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3839··-target="#idm889 | ||
| 00039c90:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 00039c90:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00039cf0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 00039d00:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00039d10:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039d20:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039d30:·7365·2220·6964·3d22·6964·6d38·3839·3122··se"·id="idm8891" | |||
| 00039d40:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039d50:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039cf0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00039d00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00039d10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039d20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039d30:·7073·6522·2069·643d·2269·646d·3838·3931··pse"·id="idm8891 | |||
| 00039d40:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039d50:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039d60:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00039d | 00039d60:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 00039d80:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00039d90:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00039da0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039db0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00039dc0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039dd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00039de0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00039df0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00039e00:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00039e10:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039e20:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039e30:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00039e40:·3a20·456e·7375·7265·2064·6e66·2d61·7574··:·Ensure·dnf-aut | |||
| 00039 | 00039d70:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 00039d80:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039d90:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039da0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039db0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039dc0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039dd0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039de0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039df0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039e00:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039e10:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00039e20:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00039e30:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 00039e40:·2069·6e73·7461·6c6c·5f64·6e66·2d61·7574···install_dnf-aut | |||
| 00039e50:·6f6d·6174·6963·0a0a·636c·6173·7320·696e··omatic..class·in | |||
| 00039e60:·7374·616c·6c5f·646e·662d·6175·746f·6d61··stall_dnf-automa | |||
| 00039e | 00039e70:·7469·6320·7b0a·2020·7061·636b·6167·6520··tic·{.··package· | ||
| 00039e70:·2020·206e·616d·653a·2064·6e66·2d61·7574·····name:·dnf-aut | |||
| 00039e80:·6f6d·6174·6963·0a20·2020·2073·7461·7465··omatic.····state | |||
| 00039e90:·3a20·7072·6573·656e·740a·2020·7461·6773··:·present.··tags | |||
| 00039ea0:·3a0a·2020·2d20·4343·452d·3931·3136·332d··:.··-·CCE-91163- | |||
| 00039eb0:·360a·2020·2d20·656e·6162·6c65·5f73·7472··6.··-·enable_str | |||
| 00039ec0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00039ed0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00039ee0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00039ef0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00039f00:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00039f10:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 00039 | 00039e80:·7b20·2764·6e66·2d61·7574·6f6d·6174·6963··{·'dnf-automatic | ||
| 00039 | 00039e90:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | ||
| 00039ea0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 00039eb0:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 00039 | 00039ec0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 00039 | 00039ed0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 00039 | 00039ee0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 00039 | 00039ef0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 00039f | 00039f00:·2d74·6172·6765·743d·2223·6964·6d38·3839··-target="#idm889 | ||
| 00039f | 00039f10:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 00039f | 00039f20:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00039f | 00039f30:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00039f | 00039f40:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00039f | 00039f50:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00039f | 00039f60:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00039ff0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003 | 00039f70:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 00039f80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003 | 00039f90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003 | 00039fa0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003 | 00039fb0:·2220·6964·3d22·6964·6d38·3839·3222·3e3c··"·id="idm8892">< | ||
| 0003 | 00039fc0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003a050:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003 | 00039fd0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 00039fe0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003 | 00039ff0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003a0 | 0003a000:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003a0 | 0003a010:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003a0 | 0003a020:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003a0 | 0003a030:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003a0 | 0003a040:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003a0 | 0003a050:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003a0 | 0003a060:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003a0 | 0003a070:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003a | 0003a080:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003a | 0003a090:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003a | 0003a0a0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003a0b0:·3e3c·636f·6465·3e0a·7a79·7070·6572·2069··><code>.zypper·i | |||
| 0003a0c0:·6e73·7461·6c6c·202d·7920·2264·6e66·2d61··nstall·-y·"dnf-a | |||
| 0003a0d0:·7574·6f6d·6174·6963·220a·3c2f·636f·6465··utomatic".</code | |||
| 0003a130:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003a140:·6465·2069·6e73·7461·6c6c·5f64·6e66·2d61··de·install_dnf-a | |||
| 0003a150:·7574·6f6d·6174·6963·0a0a·636c·6173·7320··utomatic..class· | |||
| 0003a160:·696e·7374·616c·6c5f·646e·662d·6175·746f··install_dnf-auto | |||
| 0003a170:·6d61·7469·6320·7b0a·2020·7061·636b·6167··matic·{.··packag | |||
| 0003a180:·6520·7b20·2764·6e66·2d61·7574·6f6d·6174··e·{·'dnf-automat | |||
| 0003a190:·6963·273a·0a20·2020·2065·6e73·7572·6520··ic':.····ensure· | |||
| Max diff block lines reached; 2022550/2042476 bytes (99.02%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 87, 55 lines modified | Offset 87, 55 lines modified | ||
| 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91163-6 | 91 | Identifiers:·CCE-91163-6 |
| 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 99 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 100 | ··package: | ||
| 101 | ····name:·dnf-automatic | ||
| 102 | ····state:·present | ||
| 103 | ··tags: | ||
| 104 | ··-·CCE-91163-6 | ||
| 105 | ··-·enable_strategy | ||
| 106 | ··-·low_complexity | ||
| 107 | ··-·low_disruption | ||
| 108 | ··-·medium_severity | ||
| 109 | ··-·no_reboot_needed | ||
| 110 | ··-·package_dnf-automatic_installed | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 116 | include·install_dnf-automatic | 99 | include·install_dnf-automatic |
| 117 | class·install_dnf-automatic·{ | 100 | class·install_dnf-automatic·{ |
| 118 | ··package·{·'dnf-automatic': | 101 | ··package·{·'dnf-automatic': |
| 119 | ····ensure·=>·'installed', | 102 | ····ensure·=>·'installed', |
| 120 | ··} | 103 | ··} |
| 121 | } | 104 | } |
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 110 | zypper·install·-y·"dnf-automatic" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | [[packages]] | 112 | [[packages]] |
| 124 | name·=·"dnf-automatic" | 113 | name·=·"dnf-automatic" |
| 125 | version·=·"*" | 114 | version·=·"*" |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | 120 | -·name:·Ensure·dnf-automatic·is·installed | |
| 121 | ··package: | ||
| 122 | ····name:·dnf-automatic | ||
| 123 | ····state:·present | ||
| 124 | ··tags: | ||
| 125 | ··-·CCE-91163-6 | ||
| 126 | ··-·enable_strategy | ||
| 127 | ··-·low_complexity | ||
| 128 | ··-·low_disruption | ||
| 129 | ··-·medium_severity | ||
| 130 | ··-·no_reboot_needed | ||
| 131 | ··-·package_dnf-automatic_installed | ||
| 132 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 132 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 133 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically | 133 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically |
| 134 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 134 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 135 | automatic.conf. | 135 | automatic.conf. |
| 136 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the | 136 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the |
| 137 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security | 137 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security |
| 138 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage | 138 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage |
| Offset 146, 37 lines modified | Offset 146, 14 lines modified | ||
| 146 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 146 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 147 | Identifiers:·CCE-91165-1 | 147 | Identifiers:·CCE-91165-1 |
| 148 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 148 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 149 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 149 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 150 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 150 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 151 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 151 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 152 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 152 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | ||
| 158 | -·name:·Configure·dnf-automatic·to·Install·Available·Updates·Automatically | ||
| 159 | ··ini_file: | ||
| 160 | ····dest:·/etc/dnf/automatic.conf | ||
| 161 | ····section:·commands | ||
| 162 | ····option:·apply_updates | ||
| 163 | ····value:·'yes' | ||
| 164 | ····create:·true | ||
| 165 | ··tags: | ||
| 166 | ··-·CCE-91165-1 | ||
| 167 | ··-·NIST-800-53-CM-6(a) | ||
| 168 | ··-·NIST-800-53-SI-2(5) | ||
| 169 | ··-·NIST-800-53-SI-2(c) | ||
| 170 | ··-·dnf-automatic_apply_updates | ||
| 171 | ··-·low_complexity | ||
| 172 | ··-·medium_disruption | ||
| 173 | ··-·medium_severity | ||
| 174 | ··-·no_reboot_needed | ||
| 175 | ··-·unknown_strategy | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 177 | found=false | 154 | found=false |
| 178 | #·set·value·in·all·files·if·they·contain·section·or·key | 155 | #·set·value·in·all·files·if·they·contain·section·or·key |
| 179 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | 156 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do |
| 180 | ····if·[·!·-e·"$f"·];·then | 157 | ····if·[·!·-e·"$f"·];·then |
| Max diff block lines reached; 149534/154925 bytes (96.52%) of diff not shown. | |||
| Offset 14312, 15 lines modified | Offset 14312, 15 lines modified | ||
| 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037ee0:·3234·2d31·312d·303 | 00037ee0:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15171, 167 lines modified | Offset 15171, 167 lines modified | ||
| 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | ||
| 0003b430:·3332·2220·7461·6269·6e64·6578·3d22·3022··32"·tabindex="0" | 0003b430:·3332·2220·7461·6269·6e64·6578·3d22·3022··32"·tabindex="0" | ||
| 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b490:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b4a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b4b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b4c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b4d0:·7073·6522·2069·643d·2269·646d·3633·3332··pse"·id="idm6332 | |||
| 0003b4e0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b4f0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b490:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b4a0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b4b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b4c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b4d0:·6170·7365·2220·6964·3d22·6964·6d36·3333··apse"·id="idm633 | |||
| 0003b4e0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b4f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b500:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b5 | 0003b500:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003b510:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b520:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b530:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b540:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b550:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b560:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b570:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b580:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b520:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b530:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b540:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b550:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b560:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b570:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b580:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b590:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b5a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b5b0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b5c0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b5d0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b5e0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b5f0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b600:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b610:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b620:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b630:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b640:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b650:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b660:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b670:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b680:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b690:·202d·2043·4345·2d38·3332·3839·2d39·0a20···-·CCE-83289-9.· | |||
| 0003b6a0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b6b0:·0a20·202d·2044·4953·412d·5354·4947·2d53··.··-·DISA-STIG-S | |||
| 0003b6c0:·4c45·532d·3135·2d30·3130·3431·390a·2020··LES-15-010419.·· | |||
| 0003b6d0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b6e0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b6f0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b700:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b710:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b720:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b730:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b740:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b750:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b760:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b770:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b780:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b790:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b7a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b7b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b7c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b7d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b7e0:·2369·646d·3633·3333·2220·7461·6269·6e64··#idm6333"·tabind | |||
| 0003b7f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b800:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b810:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b820:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b830:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b840:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003b850:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b860:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b870:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b880:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b890:·646d·3633·3333·223e·3c74·6162·6c65·2063··dm6333"><table·c | |||
| 0003b8a0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b8b0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b8c0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b8d0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b8e0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b8f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b900:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b910:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b920:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b930:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b940:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b950:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b960:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b | 0003b590:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b5a0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b5b0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b5c0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b5d0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b5e0:·6520·696e·7374·616c·6c5f·6169·6465·0a0a··e·install_aide.. | |||
| 0003b5f0:·636c·6173·7320·696e·7374·616c·6c5f·6169··class·install_ai | |||
| 0003b600:·6465·207b·0a20·2070·6163·6b61·6765·207b··de·{.··package·{ | |||
| 0003b610:·2027·6169·6465·273a·0a20·2020·2065·6e73···'aide':.····ens | |||
| 0003b620:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003b630:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| Max diff block lines reached; 19731919/19754743 bytes (99.88%) of diff not shown. | |||
| Offset 14313, 15 lines modified | Offset 14313, 15 lines modified | ||
| 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00037ee0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037ef0:·303 | 00037ef0:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15149, 168 lines modified | Offset 15149, 168 lines modified | ||
| 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b2d0:·6d36·3333·3222·2074·6162·696e·6465·783d··m6332"·tabindex= | 0003b2d0:·6d36·3333·3222·2074·6162·696e·6465·783d··m6332"·tabindex= | ||
| 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b330:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b340:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b350:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b360:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b370:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003b380:·3333·3222·3e3c·7461·626c·6520·636c·6173··332"><table·clas | |||
| 0003b390:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b330:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b340:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b350:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b360:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b370:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b380:·3633·3332·223e·3c74·6162·6c65·2063·6c61··6332"><table·cla | |||
| 0003b390:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b3a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b3 | 0003b3a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b3b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b3c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b3d0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b3e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b3f0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b400:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b410:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b420:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b3c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b3d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b3e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b3f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b400:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b410:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b420:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b430:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b440:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b450:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b460:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b470:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b480:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b490:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b4a0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b4b0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b4c0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b4d0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b4e0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b4f0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b500:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b510:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b520:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b530:·3a0a·2020·2d20·4343·452d·3833·3238·392d··:.··-·CCE-83289- | |||
| 0003b540:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b550:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b560:·472d·534c·4553·2d31·352d·3031·3034·3139··G-SLES-15-010419 | |||
| 0003b570:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b580:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b590:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b5a0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b5b0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b5c0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b5d0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b5e0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b5f0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b600:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b610:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b620:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b630:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b640:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b650:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b660:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b670:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b680:·743d·2223·6964·6d36·3333·3322·2074·6162··t="#idm6333"·tab | |||
| 0003b690:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b6a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b6b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b6c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b6d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b6e0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b6f0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b700:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b710:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b720:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b730:·3d22·6964·6d36·3333·3322·3e3c·7461·626c··="idm6333"><tabl | |||
| 0003b740:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b750:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b760:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b770:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b780:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b790:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b7a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b7b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b7c0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b7d0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b7e0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b7f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b800:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b | 0003b430:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b440:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b450:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b460:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b470:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b480:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b490:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b4a0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b4b0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b4c0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b4d0:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| Max diff block lines reached; 8603413/8626375 bytes (99.73%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 125, 67 lines modified | Offset 125, 67 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | -·name:·Ensure·aide·is·installed | ||
| 138 | ··package: | ||
| 139 | ····name:·aide | ||
| 140 | ····state:·present | ||
| 141 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 142 | ··tags: | ||
| 143 | ··-·CCE-83289-9 | ||
| 144 | ··-·CJIS-5.10.1.3 | ||
| 145 | ··-·DISA-STIG-SLES-15-010419 | ||
| 146 | ··-·NIST-800-53-CM-6(a) | ||
| 147 | ··-·PCI-DSS-Req-11.5 | ||
| 148 | ··-·PCI-DSSv4-11.5.2 | ||
| 149 | ··-·enable_strategy | ||
| 150 | ··-·low_complexity | ||
| 151 | ··-·low_disruption | ||
| 152 | ··-·medium_severity | ||
| 153 | ··-·no_reboot_needed | ||
| 154 | ··-·package_aide_installed | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | include·install_aide | 137 | include·install_aide |
| 161 | class·install_aide·{ | 138 | class·install_aide·{ |
| 162 | ··package·{·'aide': | 139 | ··package·{·'aide': |
| 163 | ····ensure·=>·'installed', | 140 | ····ensure·=>·'installed', |
| 164 | ··} | 141 | ··} |
| 165 | } | 142 | } |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | 148 | #·Remediation·is·applicable·only·in·certain·platforms |
| 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 149 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 177 | zypper·install·-y·"aide" | 150 | zypper·install·-y·"aide" |
| 178 | else | 151 | else |
| 179 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 152 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 180 | fi | 153 | fi |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | -·name:·Ensure·aide·is·installed | ||
| 164 | ··package: | ||
| 165 | ····name:·aide | ||
| 166 | ····state:·present | ||
| 167 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 168 | ··tags: | ||
| 169 | ··-·CCE-83289-9 | ||
| 170 | ··-·CJIS-5.10.1.3 | ||
| 171 | ··-·DISA-STIG-SLES-15-010419 | ||
| 172 | ··-·NIST-800-53-CM-6(a) | ||
| 173 | ··-·PCI-DSS-Req-11.5 | ||
| 174 | ··-·PCI-DSSv4-11.5.2 | ||
| 175 | ··-·enable_strategy | ||
| 176 | ··-·low_complexity | ||
| 177 | ··-·low_disruption | ||
| 178 | ··-·medium_severity | ||
| 179 | ··-·no_reboot_needed | ||
| 180 | ··-·package_aide_installed | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/bin/aide·--init | 183 | $·sudo·/usr/bin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 185 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 185 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 186 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 186 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 187 | generated·database·can·be·installed·as·follows: | 187 | generated·database·can·be·installed·as·follows: |
| Offset 212, 14 lines modified | Offset 212, 29 lines modified | ||
| 212 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 212 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 215 | ·············_\x8c_\x8i_\x8s············1.4.1 | 215 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 216 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 216 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 217 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 217 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 218 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 218 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 220 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 221 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 222 | zypper·-q·--no-remote·ref | ||
| 223 | zypper·install·-y·"aide" | ||
| Max diff block lines reached; 1071978/1077481 bytes (99.49%) of diff not shown. | |||
| Offset 14314, 15 lines modified | Offset 14314, 15 lines modified | ||
| 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037ef0:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037f00:·2d31·312d·303 | 00037f00:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15135, 168 lines modified | Offset 15135, 168 lines modified | ||
| 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b1f0:·6964·6d36·3333·3222·2074·6162·696e·6465··idm6332"·tabinde | 0003b1f0:·6964·6d36·3333·3222·2074·6162·696e·6465··idm6332"·tabinde | ||
| 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b250:·656d·6564·6961·7469·6f6e·20 | 0003b250:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | ||
| 0003b260:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b270:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b280:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b2 | 0003b260:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003b270:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b280:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b290:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b2a0:·6 | 0003b2a0:·6d36·3333·3222·3e3c·7461·626c·6520·636c··m6332"><table·cl | ||
| 0003b2b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b2b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b2c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b2 | 0003b2c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b2d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b2e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b2f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b300:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b310:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b320:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b2e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b2f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b300:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b310:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b320:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b330:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b340:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b350:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b360:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b370:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b3 | 0003b330:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b340:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b390:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b3a0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b3b0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b3c0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b3d0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b3e0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b3f0:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b400:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b410:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b420:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b430:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b440:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b450:·6773·3a0a·2020·2d20·4343·452d·3833·3238··gs:.··-·CCE-8328 | |||
| 0003b460:·392d·390a·2020·2d20·434a·4953·2d35·2e31··9-9.··-·CJIS-5.1 | |||
| 0003b470:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b480:·5449·472d·534c·4553·2d31·352d·3031·3034··TIG-SLES-15-0104 | |||
| 0003b490:·3139·0a20·202d·204e·4953·542d·3830·302d··19.··-·NIST-800- | |||
| 0003b4a0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b4b0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b4c0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b4d0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b4e0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b4f0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b500:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b510:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b520:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b530:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b540:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b550:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b560:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b570:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b580:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b590:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b5a0:·6765·743d·2223·6964·6d36·3333·3322·2074··get="#idm6333"·t | |||
| 0003b5b0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b5c0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b5d0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b5e0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b5f0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b600:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b610:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b620:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b630:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b640:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b650:·6964·3d22·6964·6d36·3333·3322·3e3c·7461··id="idm6333"><ta | |||
| 0003b660:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b670:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b680:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b690:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b6a0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b6b0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b6c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6d0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b6e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b6f0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b700:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b710:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b720:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b | 0003b350:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b360:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b370:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b380:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b390:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b3a0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b3b0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b3c0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b3d0:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b3e0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b3f0:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b740:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b750:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b760:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b770:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| Max diff block lines reached; 8344835/8367797 bytes (99.73%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 67 lines modified | Offset 122, 67 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | -·name:·Ensure·aide·is·installed | ||
| 135 | ··package: | ||
| 136 | ····name:·aide | ||
| 137 | ····state:·present | ||
| 138 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 139 | ··tags: | ||
| 140 | ··-·CCE-83289-9 | ||
| 141 | ··-·CJIS-5.10.1.3 | ||
| 142 | ··-·DISA-STIG-SLES-15-010419 | ||
| 143 | ··-·NIST-800-53-CM-6(a) | ||
| 144 | ··-·PCI-DSS-Req-11.5 | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | ||
| 146 | ··-·enable_strategy | ||
| 147 | ··-·low_complexity | ||
| 148 | ··-·low_disruption | ||
| 149 | ··-·medium_severity | ||
| 150 | ··-·no_reboot_needed | ||
| 151 | ··-·package_aide_installed | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | include·install_aide | 134 | include·install_aide |
| 158 | class·install_aide·{ | 135 | class·install_aide·{ |
| 159 | ··package·{·'aide': | 136 | ··package·{·'aide': |
| 160 | ····ensure·=>·'installed', | 137 | ····ensure·=>·'installed', |
| 161 | ··} | 138 | ··} |
| 162 | } | 139 | } |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 145 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 146 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | zypper·install·-y·"aide" | 147 | zypper·install·-y·"aide" |
| 175 | else | 148 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 150 | fi |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | [[packages]] | ||
| 153 | name·=·"aide" | ||
| 154 | version·=·"*" | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | -·name:·Ensure·aide·is·installed | ||
| 161 | ··package: | ||
| 162 | ····name:·aide | ||
| 163 | ····state:·present | ||
| 164 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 165 | ··tags: | ||
| 166 | ··-·CCE-83289-9 | ||
| 167 | ··-·CJIS-5.10.1.3 | ||
| 168 | ··-·DISA-STIG-SLES-15-010419 | ||
| 169 | ··-·NIST-800-53-CM-6(a) | ||
| 170 | ··-·PCI-DSS-Req-11.5 | ||
| 171 | ··-·PCI-DSSv4-11.5.2 | ||
| 172 | ··-·enable_strategy | ||
| 173 | ··-·low_complexity | ||
| 174 | ··-·low_disruption | ||
| 175 | ··-·medium_severity | ||
| 176 | ··-·no_reboot_needed | ||
| 177 | ··-·package_aide_installed | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/bin/aide·--init | 180 | $·sudo·/usr/bin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 182 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 182 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 183 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 183 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 184 | generated·database·can·be·installed·as·follows: | 184 | generated·database·can·be·installed·as·follows: |
| Offset 209, 14 lines modified | Offset 209, 29 lines modified | ||
| 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 209 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 211 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 212 | ·············_\x8c_\x8i_\x8s············1.4.1 | 212 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 213 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 214 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 215 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 219 | zypper·-q·--no-remote·ref | ||
| 220 | zypper·install·-y·"aide" | ||
| Max diff block lines reached; 1043361/1048874 bytes (99.47%) of diff not shown. | |||
| Offset 14313, 15 lines modified | Offset 14313, 15 lines modified | ||
| 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ef0:·206f·6620·3230·3234·2d31·312d·303 | 00037ef0:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15162, 168 lines modified | Offset 15162, 168 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3633·3332·2220·7461·6269·6e64·6578·3d22··6332"·tabindex=" | 0003b3a0:·3633·3332·2220·7461·6269·6e64·6578·3d22··6332"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20· | 0003b400:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | ||
| 0003b410:· | 0003b410:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b420:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b430:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b440:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b450:·3332·223e·3c74·6162·6c65·2063·6c61·7373··32"><table·class | |||
| 0003b460:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b420:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b430:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b440:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003b450:·3333·3222·3e3c·7461·626c·6520·636c·6173··332"><table·clas | |||
| 0003b460:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b470:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b4 | 0003b470:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b480:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b490:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b4a0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b4b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b4c0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b4d0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b4e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b4f0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b490:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b4a0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b4b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b4c0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b4d0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b4e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4f0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b500:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b510:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b520:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b530:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b540:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b550:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b560:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b570:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b580:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b590:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b5a0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b5b0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b5c0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b5d0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b5e0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b5f0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b600:·0a20·202d·2043·4345·2d38·3332·3839·2d39··.··-·CCE-83289-9 | |||
| 0003b610:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b620:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b630:·2d53·4c45·532d·3135·2d30·3130·3431·390a··-SLES-15-010419. | |||
| 0003b640:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b650:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b660:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b670:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b680:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b690:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b6a0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b6b0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b6c0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b6d0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b6e0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b6f0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b700:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b710:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b720:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b730:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b740:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b750:·3d22·2369·646d·3633·3333·2220·7461·6269··="#idm6333"·tabi | |||
| 0003b760:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b770:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b780:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b790:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b7a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b7b0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b7c0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b7d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b7e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b7f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b800:·2269·646d·3633·3333·223e·3c74·6162·6c65··"idm6333"><table | |||
| 0003b810:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b820:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b830:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b840:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b850:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b860:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b870:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b880:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b890:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b8a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b8b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b8c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b8d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b | 0003b500:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b510:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b520:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b530:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b540:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b550:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b560:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b570:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b580:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b590:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b5a0:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b8f0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b900:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| Max diff block lines reached; 19648960/19671922 bytes (99.88%) of diff not shown. | |||
| Offset 14325, 15 lines modified | Offset 14325, 15 lines modified | ||
| 00037f40:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037f40:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037f50:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037f50:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037f60:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037f60:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f70:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f70:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f80:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f80:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037f90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fa0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | 00037fa0:·2028·6173·206f·6620·3230·3234·2d31·312d···(as·of·2024-11- | ||
| 00037fb0:·303 | 00037fb0:·3037·290a·2020·2020·2020·2020·2020·2020··07).············ | ||
| 00037fc0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037fc0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037fd0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037fd0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037fe0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037fe0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037ff0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037ff0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038000:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038000:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038010:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038010:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038020:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038020:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15209, 306 lines modified | Offset 15209, 306 lines modified | ||
| 0003b680:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b680:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b690:·6d35·3939·3022·2074·6162·696e·6465·783d··m5990"·tabindex= | 0003b690:·6d35·3939·3022·2074·6162·696e·6465·783d··m5990"·tabindex= | ||
| 0003b6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b6f0:·6564·6961·7469·6f6e·20 | 0003b6f0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003b700:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b710:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b720:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b730:·6170·7365·2220·6964·3d22·6964·6d35·3939··apse"·id="idm599 | |||
| 0003b740:·3022·3e3c·7072·653e·3c63·6f64·653e·0a23··0"><pre><code>.# | |||
| 0003b750:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | |||
| 0003b760:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | |||
| 0003b770:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | |||
| 0003b780:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | |||
| 0003b790:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | |||
| 0003b7a0:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | |||
| 0003b7b0:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | |||
| 0003b7c0:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | |||
| 0003b700:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b710:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b720:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b730:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b740:·3539·3930·223e·3c74·6162·6c65·2063·6c61··5990"><table·cla | |||
| 0003b750:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b760:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b770:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b780:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b790:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b7a0:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | |||
| 0003b7b0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b7c0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 0003b7d0:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 0003b7e0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b7f0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b800:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b810:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003b820:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b830:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b840:·6f64·653e·2d20·6e61·6d65·3a20·2753·6574··ode>-·name:·'Set | |||
| 0003b850:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | |||
| 0003b860:·616e·6167·6572·2072·6569·6e73·7461·6c6c··anager·reinstall | |||
| 0003b870:·2063·6f6d·6d61·6e64·270a·2020·7365·745f···command'.··set_ | |||
| 0003b880:·6661·6374·3a0a·2020·2020·7061·636b·6167··fact:.····packag | |||
| 0003b890:·655f·6d61·6e61·6765·725f·7265·696e·7374··e_manager_reinst | |||
| 0003b8a0:·616c·6c5f·636d·643a·207a·7970·7065·7220··all_cmd:·zypper· | |||
| 0003b8b0:·7265·696e·7374·616c·6c20·2d79·0a20·2077··reinstall·-y.··w | |||
| 0003b8c0:·6865·6e3a·2061·6e73·6962·6c65·5f64·6973··hen:·ansible_dis | |||
| 0003b8d0:·7472·6962·7574·696f·6e20·696e·205b·2022··tribution·in·[·" | |||
| 0003b8e0:·4665·646f·7261·222c·2022·5265·6448·6174··Fedora",·"RedHat | |||
| 0003b8f0:·222c·2022·4365·6e74·4f53·222c·2022·4f72··",·"CentOS",·"Or | |||
| 0003b900:·6163·6c65·4c69·6e75·7822·205d·0a20·2074··acleLinux"·].··t | |||
| 0003b910:·6167·733a·0a20·202d·2043·4345·2d38·3537··ags:.··-·CCE-857 | |||
| 0003b920:·3838·2d38·0a20·202d·2043·4a49·532d·352e··88-8.··-·CJIS-5. | |||
| 0003b930:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | |||
| 0003b940:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | |||
| 0003b950:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | |||
| 0003b960:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | |||
| 0003b970:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | |||
| 0003b980:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b990:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | |||
| 0003b9a0:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | |||
| 0003b9b0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | |||
| 0003b9c0:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | |||
| 0003b9d0:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | |||
| 0003b9e0:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | |||
| 0003b9f0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003ba00:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003ba10:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003ba20:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | |||
| 0003ba30:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | |||
| 0003ba40:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | |||
| 0003ba50:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | |||
| 0003ba60:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ba70:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003ba80:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | |||
| 0003ba90:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | |||
| 0003baa0:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | |||
| 0003bab0:·6b61·6765·206d·616e·6167·6572·2072·6569··kage·manager·rei | |||
| 0003bac0:·6e73·7461·6c6c·2063·6f6d·6d61·6e64·2028··nstall·command·( | |||
| 0003bad0:·7a79·7070·6572·2927·0a20·2073·6574·5f66··zypper)'.··set_f | |||
| 0003bae0:·6163·743a·0a20·2020·2070·6163·6b61·6765··act:.····package | |||
| 0003baf0:·5f6d·616e·6167·6572·5f72·6569·6e73·7461··_manager_reinsta | |||
| 0003bb00:·6c6c·5f63·6d64·3a20·7a79·7070·6572·2069··ll_cmd:·zypper·i | |||
| 0003bb10:·6e20·2d66·202d·790a·2020·7768·656e·3a20··n·-f·-y.··when:· | |||
| 0003bb20:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | |||
| 0003bb30:·7469·6f6e·203d·3d20·2253·4c45·5322·0a20··tion·==·"SLES".· | |||
| 0003bb40:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 0003bb50:·3537·3838·2d38·0a20·202d·2043·4a49·532d··5788-8.··-·CJIS- | |||
| 0003bb60:·352e·3130·2e34·2e31·0a20·202d·204e·4953··5.10.4.1.··-·NIS | |||
| 0003bb70:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | |||
| 0003bb80:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003bb90:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | |||
| 0003bba0:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | |||
| 0003bbb0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003bbc0:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | |||
| 0003bbd0:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | |||
| 0003bbe0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003bbf0:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | |||
| 0003bc00:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | |||
| 0003bc10:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | |||
| 0003bc20:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | |||
| 0003bc30:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003bc40:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003bc50:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | |||
| 0003bc60:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | |||
| 0003bc70:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | |||
| 0003bc80:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | |||
| 0003bc90:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| Max diff block lines reached; 15979442/16021448 bytes (99.74%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 48 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 49 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 49 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 135, 14 lines modified | Offset 135, 29 lines modified | ||
| 135 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 135 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 136 | ····························A.14.2.3,·A.14.2.4 | 136 | ····························A.14.2.3,·A.14.2.4 |
| 137 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 137 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 138 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 138 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 139 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 140 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 141 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 141 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 144 | get·files·names | ||
| 145 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 146 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 147 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 148 | new·line | ||
| 149 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 150 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 151 | fi | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 147 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 157 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 148 | ··set_fact: | 158 | ··set_fact: |
| Offset 274, 29 lines modified | Offset 289, 14 lines modified | ||
| 274 | ··-·PCI-DSSv4-11.5.2 | 289 | ··-·PCI-DSSv4-11.5.2 |
| 275 | ··-·high_complexity | 290 | ··-·high_complexity |
| 276 | ··-·high_severity | 291 | ··-·high_severity |
| 277 | ··-·medium_disruption | 292 | ··-·medium_disruption |
| 278 | ··-·no_reboot_needed | 293 | ··-·no_reboot_needed |
| 279 | ··-·restrict_strategy | 294 | ··-·restrict_strategy |
| 280 | ··-·rpm_verify_hashes | 295 | ··-·rpm_verify_hashes |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 283 | get·files·names | ||
| 284 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 285 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 286 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 287 | new·line | ||
| 288 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 289 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 290 | fi | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 292 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages, | 297 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages, |
| 293 | including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and | 298 | including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and |
| 294 | commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 299 | commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 295 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 300 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 296 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions, | 301 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions, |
| 297 | run·the·following·command·to·determine·which·package·owns·it: | 302 | run·the·following·command·to·determine·which·package·owns·it: |
| Offset 336, 14 lines modified | Offset 336, 46 lines modified | ||
| 336 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 336 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 337 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 337 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 338 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 338 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 339 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 339 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 340 | ····························SRG-OS-000278-GPOS-00108 | 340 | ····························SRG-OS-000278-GPOS-00108 |
| 341 | ·············_\x8c_\x8i_\x8s············6.1.1 | 341 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 342 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 342 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 343 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 344 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 345 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 346 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 347 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 348 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 349 | declare·-A·SETPERMS_RPM_DICT | ||
| 350 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 351 | #·is·expected·by·the·RPM·database | ||
| 352 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 353 | $NF·}') | ||
| 354 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 355 | do | ||
| 356 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 357 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 358 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 359 | ········do | ||
| 360 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 361 | duplicates. | ||
| 362 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 363 | ········done | ||
| 364 | done | ||
| 365 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 366 | #·correct·values | ||
| 367 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 368 | do | ||
| 369 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 370 | done | ||
| 343 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 344 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 372 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 345 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 373 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 346 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 374 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 347 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 375 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 348 | -·name:·Read·list·of·files·with·incorrect·permissions | 376 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 349 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 377 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 424, 46 lines modified | Offset 456, 14 lines modified | ||
| 424 | ··-·PCI-DSSv4-11.5.2 | 456 | ··-·PCI-DSSv4-11.5.2 |
| 425 | ··-·high_complexity | 457 | ··-·high_complexity |
| 426 | ··-·high_severity | 458 | ··-·high_severity |
| 427 | ··-·medium_disruption | 459 | ··-·medium_disruption |
| Max diff block lines reached; 1235265/1241617 bytes (99.49%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037df0:·206f·6620·3230·3234·2d31·312d·303 | 00037df0:·206f·6620·3230·3234·2d31·312d·3037·290a···of·2024-11-07). | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15196, 307 lines modified | Offset 15196, 307 lines modified | ||
| 0003b5b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b5b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b5c0:·2223·6964·6d35·3939·3022·2074·6162·696e··"#idm5990"·tabin | 0003b5c0:·2223·6964·6d35·3939·3022·2074·6162·696e··"#idm5990"·tabin | ||
| 0003b5d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b5d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b5e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b5e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b5f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b5f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b600:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b600:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b610:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b610:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b620:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b620:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b630:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b640:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b650:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b660:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b670:·6d35·3939·3022·3e3c·7072·653e·3c63·6f64··m5990"><pre><cod | |||
| 0003b680:·653e·0a23·2046·696e·6420·7768·6963·6820··e>.#·Find·which· | |||
| 0003b690:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | |||
| 0003b6a0:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | |||
| 0003b6b0:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | |||
| 0003b6c0:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | |||
| 0003b6d0:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | |||
| 0003b6e0:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | |||
| 0003b6f0:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | |||
| 0003b630:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b640:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b650:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b660:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b670:·2269·646d·3539·3930·223e·3c74·6162·6c65··"idm5990"><table | |||
| 0003b680:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b690:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b6a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b6b0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b6c0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b6d0:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | |||
| 0003b6e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b6f0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b700:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0003b710:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b720:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b730:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b740:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b750:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003b760:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b770:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b780:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | |||
| 0003b790:·6765·206d·616e·6167·6572·2072·6569·6e73··ge·manager·reins | |||
| 0003b7a0:·7461·6c6c·2063·6f6d·6d61·6e64·270a·2020··tall·command'.·· | |||
| 0003b7b0:·7365·745f·6661·6374·3a0a·2020·2020·7061··set_fact:.····pa | |||
| 0003b7c0:·636b·6167·655f·6d61·6e61·6765·725f·7265··ckage_manager_re | |||
| 0003b7d0:·696e·7374·616c·6c5f·636d·643a·207a·7970··install_cmd:·zyp | |||
| 0003b7e0:·7065·7220·7265·696e·7374·616c·6c20·2d79··per·reinstall·-y | |||
| 0003b7f0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b800:·5f64·6973·7472·6962·7574·696f·6e20·696e··_distribution·in | |||
| 0003b810:·205b·2022·4665·646f·7261·222c·2022·5265···[·"Fedora",·"Re | |||
| 0003b820:·6448·6174·222c·2022·4365·6e74·4f53·222c··dHat",·"CentOS", | |||
| 0003b830:·2022·4f72·6163·6c65·4c69·6e75·7822·205d···"OracleLinux"·] | |||
| 0003b840:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b850:·2d38·3537·3838·2d38·0a20·202d·2043·4a49··-85788-8.··-·CJI | |||
| 0003b860:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | |||
| 0003b870:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | |||
| 0003b880:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | |||
| 0003b890:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | |||
| 0003b8a0:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | |||
| 0003b8b0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b8c0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | |||
| 0003b8d0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | |||
| 0003b8e0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b8f0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | |||
| 0003b900:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | |||
| 0003b910:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | |||
| 0003b920:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | |||
| 0003b930:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b940:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b950:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | |||
| 0003b960:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | |||
| 0003b970:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | |||
| 0003b980:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b990:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b9a0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | |||
| 0003b9b0:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | |||
| 0003b9c0:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | |||
| 0003b9d0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | |||
| 0003b9e0:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | |||
| 0003b9f0:·2072·6569·6e73·7461·6c6c·2063·6f6d·6d61···reinstall·comma | |||
| 0003ba00:·6e64·2028·7a79·7070·6572·2927·0a20·2073··nd·(zypper)'.··s | |||
| 0003ba10:·6574·5f66·6163·743a·0a20·2020·2070·6163··et_fact:.····pac | |||
| 0003ba20:·6b61·6765·5f6d·616e·6167·6572·5f72·6569··kage_manager_rei | |||
| 0003ba30:·6e73·7461·6c6c·5f63·6d64·3a20·7a79·7070··nstall_cmd:·zypp | |||
| 0003ba40:·6572·2069·6e20·2d66·202d·790a·2020·7768··er·in·-f·-y.··wh | |||
| 0003ba50:·656e·3a20·616e·7369·626c·655f·6469·7374··en:·ansible_dist | |||
| 0003ba60:·7269·6275·7469·6f6e·203d·3d20·2253·4c45··ribution·==·"SLE | |||
| 0003ba70:·5322·0a20·2074·6167·733a·0a20·202d·2043··S".··tags:.··-·C | |||
| 0003ba80:·4345·2d38·3537·3838·2d38·0a20·202d·2043··CE-85788-8.··-·C | |||
| 0003ba90:·4a49·532d·352e·3130·2e34·2e31·0a20·202d··JIS-5.10.4.1.··- | |||
| 0003baa0:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | |||
| 0003bab0:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | |||
| 0003bac0:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | |||
| 0003bad0:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | |||
| 0003bae0:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | |||
| 0003baf0:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | |||
| 0003bb00:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003bb10:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | |||
| 0003bb20:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | |||
| 0003bb30:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | |||
| 0003bb40:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003bb50:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | |||
| 0003bb60:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003bb70:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003bb80:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | |||
| 0003bb90:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | |||
| 0003bba0:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | |||
| 0003bbb0:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | |||
| 0003bbc0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| Max diff block lines reached; 14425957/14468101 bytes (99.71%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·15 | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·15 |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 41 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 130, 14 lines modified | Offset 130, 29 lines modified | ||
| 130 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 130 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 131 | ····························A.14.2.3,·A.14.2.4 | 131 | ····························A.14.2.3,·A.14.2.4 |
| 132 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 132 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 133 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 133 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 139 | get·files·names | ||
| 140 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 141 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 142 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 143 | new·line | ||
| 144 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 145 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 146 | fi | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 142 | -·name:·'Set·fact:·Package·manager·reinstall·command' | 152 | -·name:·'Set·fact:·Package·manager·reinstall·command' |
| 143 | ··set_fact: | 153 | ··set_fact: |
| Offset 269, 29 lines modified | Offset 284, 14 lines modified | ||
| 269 | ··-·PCI-DSSv4-11.5.2 | 284 | ··-·PCI-DSSv4-11.5.2 |
| 270 | ··-·high_complexity | 285 | ··-·high_complexity |
| 271 | ··-·high_severity | 286 | ··-·high_severity |
| 272 | ··-·medium_disruption | 287 | ··-·medium_disruption |
| 273 | ··-·no_reboot_needed | 288 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 289 | ··-·restrict_strategy |
| 275 | ··-·rpm_verify_hashes | 290 | ··-·rpm_verify_hashes |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 278 | get·files·names | ||
| 279 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 280 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 281 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 282 | new·line | ||
| 283 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 284 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 285 | fi | ||
| 286 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 287 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 292 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 288 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 293 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 289 | which·can·be·found·with: | 294 | which·can·be·found·with: |
| 290 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 295 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 291 | run·the·following·command·to·determine·which·package·owns·it: | 296 | run·the·following·command·to·determine·which·package·owns·it: |
| 292 | $·rpm·-qf·FILENAME | 297 | $·rpm·-qf·FILENAME |
| Offset 373, 14 lines modified | Offset 373, 46 lines modified | ||
| 373 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 373 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 374 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 374 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 375 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 375 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 376 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 376 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 377 | ····························SRG-OS-000278-GPOS-00108 | 377 | ····························SRG-OS-000278-GPOS-00108 |
| 378 | ·············_\x8c_\x8i_\x8s············6.1.1 | 378 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 379 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 379 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 381 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 382 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 383 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 384 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 385 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 386 | declare·-A·SETPERMS_RPM_DICT | ||
| 387 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 388 | #·is·expected·by·the·RPM·database | ||
| 389 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 390 | $NF·}') | ||
| 391 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 392 | do | ||
| 393 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 394 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 395 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 396 | ········do | ||
| 397 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 398 | duplicates. | ||
| 399 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 400 | ········done | ||
| 401 | done | ||
| 402 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 403 | #·correct·values | ||
| 404 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 405 | do | ||
| 406 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 407 | done | ||
| 380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 408 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 381 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 409 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 382 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 410 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 383 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 411 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 384 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 412 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 385 | -·name:·Read·list·of·files·with·incorrect·permissions | 413 | -·name:·Read·list·of·files·with·incorrect·permissions |
| 386 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev | 414 | ··command:·rpm·-Va·--nodeps·--nosignature·--nofiledigest·--nosize·--nomtime·--nordev |
| Offset 461, 46 lines modified | Offset 493, 14 lines modified | ||
| 461 | ··-·PCI-DSSv4-11.5.2 | 493 | ··-·PCI-DSSv4-11.5.2 |
| 462 | ··-·high_complexity | 494 | ··-·high_complexity |
| 463 | ··-·high_severity | 495 | ··-·high_severity |
| 464 | ··-·medium_disruption | 496 | ··-·medium_disruption |
| Max diff block lines reached; 1405568/1411769 bytes (99.56%) of diff not shown. | |||
| Offset 14314, 15 lines modified | Offset 14314, 15 lines modified | ||
| 00037e90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037ea0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037ea0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037eb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037eb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ec0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ec0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037ed0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037ed0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ee0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ee0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ef0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ef0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037f00:·3234·2d31·312d·303 | 00037f00:·3234·2d31·312d·3037·290a·2020·2020·2020··24-11-07).······ | ||
| 00037f10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037f10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15096, 168 lines modified | Offset 15096, 168 lines modified | ||
| 0003af70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003af70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003af80:·743d·2223·6964·6d36·3333·3222·2074·6162··t="#idm6332"·tab | 0003af80:·743d·2223·6964·6d36·3333·3222·2074·6162··t="#idm6332"·tab | ||
| 0003af90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003af90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003afa0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003afa0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003afb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003afb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003afc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003afc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003afd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003afd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003afe0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003afe0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | ||
| 0003aff0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b000:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b010:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003aff0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b000:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b010:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b020:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b030:·643d·2269·646d·3633·3332·223e·3c74·6162··d="idm6332"><tab | |||
| 0003b040:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b050:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b060:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b070:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b080:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b090:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b0a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b0b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b0c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b0d0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b0e0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b0f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b100:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b110:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b120:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b130:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b140:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b150:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b160:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b170:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b180:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b190:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b1a0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b1b0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b1c0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b1d0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b1e0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b1f0:·3833·3238·392d·390a·2020·2d20·434a·4953··83289-9.··-·CJIS | |||
| 0003b200:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b210:·5341·2d53·5449·472d·534c·4553·2d31·352d··SA-STIG-SLES-15- | |||
| 0003b220:·3031·3034·3139·0a20·202d·204e·4953·542d··010419.··-·NIST- | |||
| 0003b230:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b240:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b250:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b260:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b270:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b280:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b290:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b2a0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b2b0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b2c0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b2d0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b2e0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b2f0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b300:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b310:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b | 0003b020:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b030:·3d22·6964·6d36·3333·3222·3e3c·7461·626c··="idm6332"><tabl | |||
| 0003b040:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b050:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b060:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b070:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b080:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b090:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b0a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b0b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b0c0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b0d0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b0e0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b0f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b100:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b110:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b120:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b130:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b140:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b330:·2d74·6172·6765·743d·2223·6964·6d36·3333··-target="#idm633 | |||
| 0003b340:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003b350:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b360:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b370:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b380:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b390:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3a0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b3b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b3c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b3d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b3e0:·7365·2220·6964·3d22·6964·6d36·3333·3322··se"·id="idm6333" | |||
| 0003b3f0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b400:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b410:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b420:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b430:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b440:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b450:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b460:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b470:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b480:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b490:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b4a0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b4b0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b4c0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b4d0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b4e0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b | 0003b150:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | ||
| 0003b160:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| Max diff block lines reached; 22573105/22596067 bytes (99.90%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | ··············(SLES)·for·SAP·Applications·15 | 42 | ··············(SLES)·for·SAP·Applications·15 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening-sap | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening-sap |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 67 lines modified | Offset 113, 67 lines modified | ||
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 116 | ·············_\x8c_\x8i_\x8s············1.4.1 | 116 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | -·name:·Ensure·aide·is·installed | ||
| 126 | ··package: | ||
| 127 | ····name:·aide | ||
| 128 | ····state:·present | ||
| 129 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 130 | ··tags: | ||
| 131 | ··-·CCE-83289-9 | ||
| 132 | ··-·CJIS-5.10.1.3 | ||
| 133 | ··-·DISA-STIG-SLES-15-010419 | ||
| 134 | ··-·NIST-800-53-CM-6(a) | ||
| 135 | ··-·PCI-DSS-Req-11.5 | ||
| 136 | ··-·PCI-DSSv4-11.5.2 | ||
| 137 | ··-·enable_strategy | ||
| 138 | ··-·low_complexity | ||
| 139 | ··-·low_disruption | ||
| 140 | ··-·medium_severity | ||
| 141 | ··-·no_reboot_needed | ||
| 142 | ··-·package_aide_installed | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | include·install_aide | 125 | include·install_aide |
| 149 | class·install_aide·{ | 126 | class·install_aide·{ |
| 150 | ··package·{·'aide': | 127 | ··package·{·'aide': |
| 151 | ····ensure·=>·'installed', | 128 | ····ensure·=>·'installed', |
| 152 | ··} | 129 | ··} |
| 153 | } | 130 | } |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | 136 | #·Remediation·is·applicable·only·in·certain·platforms |
| 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 137 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 165 | zypper·install·-y·"aide" | 138 | zypper·install·-y·"aide" |
| 166 | else | 139 | else |
| 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 168 | fi | 141 | fi |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | -·name:·Ensure·aide·is·installed | ||
| 152 | ··package: | ||
| 153 | ····name:·aide | ||
| 154 | ····state:·present | ||
| 155 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 156 | ··tags: | ||
| 157 | ··-·CCE-83289-9 | ||
| 158 | ··-·CJIS-5.10.1.3 | ||
| 159 | ··-·DISA-STIG-SLES-15-010419 | ||
| 160 | ··-·NIST-800-53-CM-6(a) | ||
| 161 | ··-·PCI-DSS-Req-11.5 | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | ||
| 163 | ··-·enable_strategy | ||
| 164 | ··-·low_complexity | ||
| 165 | ··-·low_disruption | ||
| 166 | ··-·medium_severity | ||
| 167 | ··-·no_reboot_needed | ||
| 168 | ··-·package_aide_installed | ||
| 169 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 169 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 170 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 170 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 171 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward | 171 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward |
| 172 | ·············ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g., | 172 | ·············ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g., |
| 173 | ·············audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information | 173 | ·············audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information |
| 174 | ·············system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source | 174 | ·············system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source |
| 175 | ·············audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and | 175 | ·············audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and |
| Offset 187, 14 lines modified | Offset 187, 82 lines modified | ||
| 187 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 187 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 188 | Identifiers:·CCE-85610-4 | 188 | Identifiers:·CCE-85610-4 |
| 189 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496 | 189 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496 |
| 190 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 | 190 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 |
| 191 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 | 191 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 |
| 192 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 | 192 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 |
| 193 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r877393_rule | 193 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r877393_rule |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 199 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 200 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| Max diff block lines reached; 1733174/1740819 bytes (99.56%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037dc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037dd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037dd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037de0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037de0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037df0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037df0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | 00037e20:·2020·2020·2028·6173·206f·6620·3230·3234·······(as·of·2024 | ||
| 00037e30:·2d31·312d·303 | 00037e30:·2d31·312d·3037·290a·2020·2020·2020·2020··-11-07).········ | ||
| 00037e40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037e90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037e90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ea0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ea0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15007, 358 lines modified | Offset 15007, 358 lines modified | ||
| 0003a9e0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003a9e0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003a9f0:·743d·2223·6964·6d36·3434·3022·2074·6162··t="#idm6440"·tab | 0003a9f0:·743d·2223·6964·6d36·3434·3022·2074·6162··t="#idm6440"·tab | ||
| 0003aa00:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003aa00:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003aa10:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003aa10:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003aa20:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003aa20:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003aa30:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003aa30:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003aa40:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003aa40:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003aa50:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003aa50:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003aa60:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003aa70:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003aa80:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003aa90:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003aaa0:·6964·6d36·3434·3022·3e3c·7461·626c·6520··idm6440"><table· | |||
| 0003aab0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003aac0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003aad0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003aae0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003aaf0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003aa60:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003aa70:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003aa80:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003aa90:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003aaa0:·643d·2269·646d·3634·3430·223e·3c74·6162··d="idm6440"><tab | |||
| 0003aab0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003aac0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003aad0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003aae0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003aaf0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ab00:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ab10:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ab20:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003ab30:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ab40:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ab50:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003ab60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003ab70:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003ab80:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003ab90:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003aba0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·436f··<code>-·name:·Co | |||
| 0003abb0:·6e66·6967·7572·6520·4149·4445·2074·6f20··nfigure·AIDE·to· | |||
| 0003abc0:·5665·7269·6679·2074·6865·2041·7564·6974··Verify·the·Audit | |||
| 0003abd0:·2054·6f6f·6c73·202d·2047·6174·6865·7220···Tools·-·Gather· | |||
| 0003abe0:·4c69·7374·206f·6620·5061·636b·6167·6573··List·of·Packages | |||
| 0003abf0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003ac00:·2d38·3536·3130·2d34·0a20·202d·2044·4953··-85610-4.··-·DIS | |||
| 0003ac10:·412d·5354·4947·2d53·4c45·532d·3135·2d30··A-STIG-SLES-15-0 | |||
| 0003ac20:·3330·3633·300a·2020·2d20·4e49·5354·2d38··30630.··-·NIST-8 | |||
| 0003ac30:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | |||
| 0003ac40:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | |||
| 0003ac50:·2d39·2833·292e·310a·2020·2d20·6169·6465··-9(3).1.··-·aide | |||
| 0003ac60:·5f63·6865·636b·5f61·7564·6974·5f74·6f6f··_check_audit_too | |||
| 0003ac70:·6c73·0a20·202d·2061·6964·655f·6368·6563··ls.··-·aide_chec | |||
| 0003ac80:·6b5f·6175·6469·745f·746f·6f6c·730a·2020··k_audit_tools.·· | |||
| 0003ac90:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003aca0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003acb0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003acc0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003acd0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ace0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003acf0:·6779·0a20·2061·6e73·6962·6c65·2e62·7569··gy.··ansible.bui | |||
| 0003ad00:·6c74·696e·2e70·6163·6b61·6765·5f66·6163··ltin.package_fac | |||
| 0003ad10:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003ad20:·2061·7574·6f0a·2020·7768·656e·3a20·616e···auto.··when:·an | |||
| 0003ad30:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003ad40:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003ad50:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003ad60:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003ad70:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003ad80:·7222·5d0a·0a2d·206e·616d·653a·2045·6e73··r"]..-·name:·Ens | |||
| 0003ad90:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003ada0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003adb0:·0a20·2020·206e·616d·653a·2027·7b7b·2069··.····name:·'{{·i | |||
| 0003adc0:·7465·6d20·7d7d·270a·2020·2020·7374·6174··tem·}}'.····stat | |||
| 0003add0:·653a·2070·7265·7365·6e74·0a20·2077·6974··e:·present.··wit | |||
| 0003ade0:·685f·6974·656d·733a·0a20·202d·2061·6964··h_items:.··-·aid | |||
| 0003adf0:·650a·2020·7768·656e·3a20·616e·7369·626c··e.··when:·ansibl | |||
| 0003ae00:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003ae10:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003ae20:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003ae30:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003ae40:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003ae50:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003ae60:·3835·3631·302d·340a·2020·2d20·4449·5341··85610-4.··-·DISA | |||
| 0003ae70:·2d53·5449·472d·534c·4553·2d31·352d·3033··-STIG-SLES-15-03 | |||
| 0003ae80:·3036·3330·0a20·202d·204e·4953·542d·3830··0630.··-·NIST-80 | |||
| 0003ae90:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | |||
| 0003aea0:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | |||
| 0003aeb0:·3928·3329·2e31·0a20·202d·2061·6964·655f··9(3).1.··-·aide_ | |||
| 0003aec0:·6368·6563·6b5f·6175·6469·745f·746f·6f6c··check_audit_tool | |||
| 0003aed0:·730a·2020·2d20·6c6f·775f·636f·6d70·6c65··s.··-·low_comple | |||
| 0003aee0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003aef0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003af00:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003af10:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003af20:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | |||
| 0003af30:·7261·7465·6779·0a0a·2d20·6e61·6d65·3a20··rategy..-·name:· | |||
| 0003af40:·5365·7420·6175·6469·745f·746f·6f6c·7320··Set·audit_tools· | |||
| 0003af50:·6661·6374·0a20·2073·6574·5f66·6163·743a··fact.··set_fact: | |||
| 0003af60:·0a20·2020·2061·7564·6974·5f74·6f6f·6c73··.····audit_tools | |||
| 0003af70:·3a0a·2020·2020·2d20·2f75·7372·2f73·6269··:.····-·/usr/sbi | |||
| 0003af80:·6e2f·6175·6469·7370·640a·2020·2020·2d20··n/audispd.····-· | |||
| 0003af90:·2f75·7372·2f73·6269·6e2f·6175·6469·7463··/usr/sbin/auditc | |||
| 0003afa0:·746c·0a20·2020·202d·202f·7573·722f·7362··tl.····-·/usr/sb | |||
| 0003afb0:·696e·2f61·7564·6974·640a·2020·2020·2d20··in/auditd.····-· | |||
| 0003afc0:·2f75·7372·2f73·6269·6e2f·6175·6765·6e72··/usr/sbin/augenr | |||
| 0003afd0:·756c·6573·0a20·2020·202d·202f·7573·722f··ules.····-·/usr/ | |||
| 0003afe0:·7362·696e·2f61·7572·6570·6f72·740a·2020··sbin/aureport.·· | |||
| 0003aff0:·2020·2d20·2f75·7372·2f73·6269·6e2f·6175····-·/usr/sbin/au | |||
| 0003b000:·7365·6172·6368·0a20·2020·202d·202f·7573··search.····-·/us | |||
| 0003b010:·722f·7362·696e·2f61·7574·7261·6365·0a20··r/sbin/autrace.· | |||
| 0003b020:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| Max diff block lines reached; 20875245/20924427 bytes (99.76%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Public·Cloud·Hardening·for·SUSE·Linux·Enterprise·15 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Public·Cloud·Hardening·for·SUSE·Linux·Enterprise·15 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 52 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 52 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 101, 14 lines modified | Offset 101, 82 lines modified | ||
| 101 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 101 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 102 | Identifiers:·CCE-85610-4 | 102 | Identifiers:·CCE-85610-4 |
| 103 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496 | 103 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496 |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 | 104 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 |
| 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 | 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 |
| 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 | 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 |
| 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r877393_rule | 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r877393_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 113 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 114 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 115 | zypper·install·-y·"aide" | ||
| 116 | if·grep·-i·'^.*/usr/sbin/auditctl.*$'·/etc/aide.conf;·then | ||
| 117 | sed·-i·"s#.*/usr/sbin/auditctl.*#/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 118 | aide.conf | ||
| 119 | else | ||
| 120 | echo·"/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 121 | fi | ||
| 122 | if·grep·-i·'^.*/usr/sbin/auditd.*$'·/etc/aide.conf;·then | ||
| 123 | sed·-i·"s#.*/usr/sbin/auditd.*#/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 124 | else | ||
| 125 | echo·"/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 126 | fi | ||
| 127 | if·grep·-i·'^.*/usr/sbin/ausearch.*$'·/etc/aide.conf;·then | ||
| 128 | sed·-i·"s#.*/usr/sbin/ausearch.*#/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 129 | aide.conf | ||
| 130 | else | ||
| 131 | echo·"/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 132 | fi | ||
| 133 | if·grep·-i·'^.*/usr/sbin/aureport.*$'·/etc/aide.conf;·then | ||
| 134 | sed·-i·"s#.*/usr/sbin/aureport.*#/usr/sbin/aureport·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 135 | aide.conf | ||
| 136 | else | ||
| 137 | echo·"/usr/sbin/aureport·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 138 | fi | ||
| 139 | if·grep·-i·'^.*/usr/sbin/autrace.*$'·/etc/aide.conf;·then | ||
| 140 | sed·-i·"s#.*/usr/sbin/autrace.*#/usr/sbin/autrace·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 141 | else | ||
| 142 | echo·"/usr/sbin/autrace·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 143 | fi | ||
| 144 | if·grep·-i·'^.*/usr/sbin/augenrules.*$'·/etc/aide.conf;·then | ||
| 145 | sed·-i·"s#.*/usr/sbin/augenrules.*#/usr/sbin/augenrules·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 146 | aide.conf | ||
| 147 | else | ||
| 148 | echo·"/usr/sbin/augenrules·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 149 | fi | ||
| 150 | if·grep·-i·'^.*/usr/sbin/audispd.*$'·/etc/aide.conf;·then | ||
| 151 | sed·-i·"s#.*/usr/sbin/audispd.*#/usr/sbin/audispd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 152 | else | ||
| 153 | echo·"/usr/sbin/audispd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 113 | -·name:·Configure·AIDE·to·Verify·the·Audit·Tools·-·Gather·List·of·Packages | 163 | -·name:·Configure·AIDE·to·Verify·the·Audit·Tools·-·Gather·List·of·Packages |
| 114 | ··tags: | 164 | ··tags: |
| Offset 201, 82 lines modified | Offset 269, 14 lines modified | ||
| 201 | ··-·NIST-800-53-AU-9(3).1 | 269 | ··-·NIST-800-53-AU-9(3).1 |
| 202 | ··-·aide_check_audit_tools | 270 | ··-·aide_check_audit_tools |
| 203 | ··-·low_complexity | 271 | ··-·low_complexity |
| 204 | ··-·low_disruption | 272 | ··-·low_disruption |
| 205 | ··-·medium_severity | 273 | ··-·medium_severity |
| 206 | ··-·no_reboot_needed | 274 | ··-·no_reboot_needed |
| 207 | ··-·restrict_strategy | 275 | ··-·restrict_strategy |
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 209 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 210 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 211 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 212 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 213 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 214 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 215 | zypper·install·-y·"aide" | ||
| 216 | if·grep·-i·'^.*/usr/sbin/auditctl.*$'·/etc/aide.conf;·then | ||
| 217 | sed·-i·"s#.*/usr/sbin/auditctl.*#/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| Max diff block lines reached; 1490482/1497395 bytes (99.54%) of diff not shown. | |||
| Offset 14307, 15 lines modified | Offset 14307, 15 lines modified | ||
| 00037e20:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037e20:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037e30:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037e30:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037e40:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037e40:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e50:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e50:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e60:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e60:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e70:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e70:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e80:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e80:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e90:·3230·3234·2d31·312d·303 | 00037e90:·3230·3234·2d31·312d·3037·290a·2020·2020··2024-11-07).···· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037ea0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037eb0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037eb0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037ec0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037ec0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037ed0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037ed0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037ee0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037ee0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037ef0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037ef0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037f00:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037f00:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 16822, 96 lines modified | Offset 16822, 96 lines modified | ||
| 00041b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00041b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00041b60:·743d·2223·6964·6d39·3336·3222·2074·6162··t="#idm9362"·tab | 00041b60:·743d·2223·6964·6d39·3336·3222·2074·6162··t="#idm9362"·tab | ||
| 00041b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00041b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00041b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00041b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00041b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00041b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00041ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00041ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00041bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 00041bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00041bc0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 00041bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 00041bd0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00041be0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00041bf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00041c00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00041c10:·6964·6d39·3336·3222·3e3c·7461·626c·6520··idm9362"><table· | |||
| 00041c20:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00041c30:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00041c40:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00041c50:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00041c60:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00041c70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00041c80:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00041c90:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00041bd0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 00041be0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00041bf0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00041c00:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00041c10:·643d·2269·646d·3933·3632·223e·3c74·6162··d="idm9362"><tab | |||
| 00041c20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00041c30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00041c40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00041c50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00041c60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00041c70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00041c80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00041c90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00041ca0:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | |||
| 00041cb0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00041cc0:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 00041cd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00041ce0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00041c | 00041ca0:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 00041cb0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00041cc0:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 00041cd0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00041ce0:·7465·6779·3a3c·2f74·683e·3c74·643e·7061··tegy:</th><td>pa | |||
| 00041cf0:·7463·683c·2f74·643e·3c2f·7472·3e3c·2f74··tch</td></tr></t | |||
| 00041d00:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00041d10:·0a0a·7a79·7070·6572·2070·6174·6368·202d··..zypper·patch·- | |||
| 00041d20:·6720·7365·6375·7269·7479·202d·790a·3c2f··g·security·-y.</ | |||
| 00041d30:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00041d40:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00041d50:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00041d60:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00041d00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00041d10:·6465·3e2d·206e·616d·653a·2053·6563·7572··de>-·name:·Secur | |||
| 00041d20:·6974·7920·7061·7463·6865·7320·6172·6520··ity·patches·are· | |||
| 00041d30:·7570·2074·6f20·6461·7465·0a20·2070·6163··up·to·date.··pac | |||
| 00041d40:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00041d50:·272a·270a·2020·2020·7374·6174·653a·206c··'*'.····state:·l | |||
| 00041d60:·6174·6573·740a·2020·7461·6773·3a0a·2020··atest.··tags:.·· | |||
| 00041d70:·2d20·4343·452d·3833·3236·312d·380a·2020··-·CCE-83261-8.·· | |||
| 00041d80:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | |||
| 00041d90:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 00041da0:·4553·2d31·352d·3031·3030·3130·0a20·202d··ES-15-010010.··- | |||
| 00041db0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 00041dc0:·3628·6129·0a20·202d·204e·4953·542d·3830··6(a).··-·NIST-80 | |||
| 00041dd0:·302d·3533·2d53·492d·3228·3529·0a20·202d··0-53-SI-2(5).··- | |||
| 00041de0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | |||
| 00041df0:·3228·6329·0a20·202d·2050·4349·2d44·5353··2(c).··-·PCI-DSS | |||
| 00041e00:·2d52·6571·2d36·2e32·0a20·202d·2050·4349··-Req-6.2.··-·PCI | |||
| 00041e10:·2d44·5353·7634·2d36·2e33·2e33·0a20·202d··-DSSv4-6.3.3.··- | |||
| 00041e20:·2068·6967·685f·6469·7372·7570·7469·6f6e···high_disruption | |||
| 00041e30:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 00041e40:·6974·790a·2020·2d20·6d65·6469·756d·5f73··ity.··-·medium_s | |||
| 00041e50:·6576·6572·6974·790a·2020·2d20·7061·7463··everity.··-·patc | |||
| 00041e60:·685f·7374·7261·7465·6779·0a20·202d·2072··h_strategy.··-·r | |||
| 00041e70:·6562·6f6f·745f·7265·7175·6972·6564·0a20··eboot_required.· | |||
| 00041e80:·202d·2073·6563·7572·6974·795f·7061·7463···-·security_patc | |||
| 00041e90:·6865·735f·7570·5f74·6f5f·6461·7465·0a20··hes_up_to_date.· | |||
| 00041ea0:·202d·2073·6b69·705f·616e·7369·626c·655f···-·skip_ansible_ | |||
| 00041eb0:·6c69·6e74·0a3c·2f63·6f64·653e·3c2f·7072··lint.</code></pr | |||
| 00041ec0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00041ed0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00041 | 00041d70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 00041d80:·2369·646d·3933·3633·2220·7461·6269·6e64··#idm9363"·tabind | |||
| 00041d90:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00041da0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00041db0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00041dc0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00041dd0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00041de0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 00041df0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 00041ef0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00041f00:·6172·6765·743d·2223·6964·6d39·3336·3322··arget="#idm9363" | |||
| 00041f10:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00041f20:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00041f30:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00041f40:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00041f50:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00041f60:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00041f70:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 00041 | 00041e00:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 00041 | 00041e10:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 00041 | 00041e20:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 00041 | 00041e30:·6964·6d39·3336·3322·3e3c·7461·626c·6520··idm9363"><table· | ||
| 00041 | 00041e40:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 00041 | 00041e50:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 00041 | 00041e60:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 00041 | 00041e70:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0004 | 00041e80:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0004 | 00041e90:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 00042020:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| Max diff block lines reached; 9195942/9208966 bytes (99.86%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·15 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·15 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 44 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 45 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 276, 14 lines modified | Offset 276, 22 lines modified | ||
| 276 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 276 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 277 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 277 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 278 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010010 | 278 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010010 |
| 279 | ·············_\x8c_\x8i_\x8s············1.9 | 279 | ·············_\x8c_\x8i_\x8s············1.9 |
| 280 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R61 | 280 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R61 |
| 281 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3 | 281 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3 |
| 282 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234802r622137_rule | 282 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234802r622137_rule |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | ||
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | ||
| 288 | zypper·patch·-g·security·-y | ||
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 290 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 291 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 292 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | 293 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch |
| 288 | -·name:·Security·patches·are·up·to·date | 294 | -·name:·Security·patches·are·up·to·date |
| 289 | ··package: | 295 | ··package: |
| Offset 301, 22 lines modified | Offset 309, 14 lines modified | ||
| 301 | ··-·high_disruption | 309 | ··-·high_disruption |
| 302 | ··-·low_complexity | 310 | ··-·low_complexity |
| 303 | ··-·medium_severity | 311 | ··-·medium_severity |
| 304 | ··-·patch_strategy | 312 | ··-·patch_strategy |
| 305 | ··-·reboot_required | 313 | ··-·reboot_required |
| 306 | ··-·security_patches_up_to_date | 314 | ··-·security_patches_up_to_date |
| 307 | ··-·skip_ansible_lint | 315 | ··-·skip_ansible_lint |
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 309 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 310 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | ||
| 311 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 312 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | ||
| 313 | zypper·patch·-g·security·-y | ||
| 314 | Group ·Account·and·Access·Control· Group·contains·6·groups·and·7·rules | 316 | Group ·Account·and·Access·Control· Group·contains·6·groups·and·7·rules |
| 315 | _\x8[_\x8r_\x8e_\x8f_\x8] ·In·traditional·Unix·security,·if·an·attacker·gains·shell·access·to·a·certain·login·account, | 317 | _\x8[_\x8r_\x8e_\x8f_\x8] ·In·traditional·Unix·security,·if·an·attacker·gains·shell·access·to·a·certain·login·account, |
| 316 | they·can·perform·any·action·or·access·any·file·to·which·that·account·has·access.·Therefore,·making·it | 318 | they·can·perform·any·action·or·access·any·file·to·which·that·account·has·access.·Therefore,·making·it |
| 317 | more·difficult·for·unauthorized·people·to·gain·shell·access·to·accounts,·particularly·to·privileged | 319 | more·difficult·for·unauthorized·people·to·gain·shell·access·to·accounts,·particularly·to·privileged |
| 318 | accounts,·is·a·necessary·part·of·securing·a·system.·This·section·introduces·mechanisms·for | 320 | accounts,·is·a·necessary·part·of·securing·a·system.·This·section·introduces·mechanisms·for |
| 319 | restricting·access·to·accounts·under·SUSE·Linux·Enterprise·15. | 321 | restricting·access·to·accounts·under·SUSE·Linux·Enterprise·15. |
| 320 | Group ·Protect·Accounts·by·Configuring·PAM· Group·contains·2·groups·and·2·rules | 322 | Group ·Protect·Accounts·by·Configuring·PAM· Group·contains·2·groups·and·2·rules |
| Offset 518, 14 lines modified | Offset 518, 306 lines modified | ||
| 518 | ·············_\x8n_\x8i_\x8s_\x8t···········AC-9,·AC-9(1) | 518 | ·············_\x8n_\x8i_\x8s_\x8t···········AC-9,·AC-9(1) |
| 519 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 519 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 520 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.2.4 | 520 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.2.4 |
| 521 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 521 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 522 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-020080 | 522 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-020080 |
| 523 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1.4 | 523 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1.4 |
| 524 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234873r858542_rule | 524 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234873r858542_rule |
| 525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 526 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 527 | if·rpm·--quiet·-q·pam;·then | ||
| 528 | if·[·-f·/usr/bin/authselect·];·then | ||
| 529 | ····if·authselect·list-features·sssd·|·grep·-q·with-silent-lastlog;·then | ||
| 530 | ········if·!·authselect·check;·then | ||
| 531 | ········echo·" | ||
| 532 | ········authselect·integrity·check·failed.·Remediation·aborted! | ||
| 533 | ········This·remediation·could·not·be·applied·because·an·authselect·profile·was·not·selected·or·the | ||
| 534 | selected·profile·is·not·intact. | ||
| 535 | ········It·is·not·recommended·to·manually·edit·the·PAM·files·when·authselect·tool·is·available. | ||
| 536 | ········In·cases·where·the·default·authselect·profile·does·not·cover·a·specific·demand,·a·custom | ||
| 537 | authselect·profile·is·recommended." | ||
| 538 | ········exit·1 | ||
| 539 | ········fi | ||
| 540 | ········authselect·disable-feature·with-silent-lastlog | ||
| 541 | ········authselect·apply-changes·-b | ||
| 542 | ····else | ||
| 543 | ········if·!·authselect·check;·then | ||
| 544 | ········echo·" | ||
| 545 | ········authselect·integrity·check·failed.·Remediation·aborted! | ||
| 546 | ········This·remediation·could·not·be·applied·because·an·authselect·profile·was·not·selected·or·the | ||
| 547 | selected·profile·is·not·intact. | ||
| 548 | ········It·is·not·recommended·to·manually·edit·the·PAM·files·when·authselect·tool·is·available. | ||
| 549 | ········In·cases·where·the·default·authselect·profile·does·not·cover·a·specific·demand,·a·custom | ||
| 550 | authselect·profile·is·recommended." | ||
| 551 | ········exit·1 | ||
| 552 | ········fi | ||
| 553 | ········CURRENT_PROFILE=$(authselect·current·-r·|·awk·'{·print·$1·}') | ||
| 554 | ········#·If·not·already·in·use,·a·custom·profile·is·created·preserving·the·enabled·features. | ||
| 555 | ········if·[[·!·$CURRENT_PROFILE·==·custom/*·]];·then | ||
| 556 | ············ENABLED_FEATURES=$(authselect·current·|·tail·-n+3·|·awk·'{·print·$2·}') | ||
| 557 | ············authselect·create-profile·hardening·-b·$CURRENT_PROFILE | ||
| 558 | ············CURRENT_PROFILE="custom/hardening" | ||
| 559 | ············authselect·apply-changes·-b·--backup=before-hardening-custom-profile | ||
| 560 | ············authselect·select·$CURRENT_PROFILE | ||
| 561 | ············for·feature·in·$ENABLED_FEATURES;·do | ||
| 562 | ················authselect·enable-feature·$feature; | ||
| 563 | ············done | ||
| 564 | ············authselect·apply-changes·-b·--backup=after-hardening-custom-profile | ||
| 565 | ········fi | ||
| 566 | ········PAM_FILE_NAME=$(basename·"/etc/pam.d/login") | ||
| 567 | ········PAM_FILE_PATH="/etc/authselect/$CURRENT_PROFILE/$PAM_FILE_NAME" | ||
| 568 | ········authselect·apply-changes·-b | ||
| 569 | ········if·[·-e·"$PAM_FILE_PATH"·]·;·then | ||
| 570 | ············PAM_FILE_PATH="$PAM_FILE_PATH" | ||
| 571 | ············if·[·-f·/usr/bin/authselect·];·then | ||
| 572 | ················if·!·authselect·check;·then | ||
| 573 | ················echo·" | ||
| 574 | ················authselect·integrity·check·failed.·Remediation·aborted! | ||
| Max diff block lines reached; 905686/923019 bytes (98.12%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037df0:·6173·206f·6620·3230·3234·2d31·312d·303 | 00037df0:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15107, 168 lines modified | Offset 15107, 168 lines modified | ||
| 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b030:·646d·3633·3332·2220·7461·6269·6e64·6578··dm6332"·tabindex | 0003b030:·646d·3633·3332·2220·7461·6269·6e64·6578··dm6332"·tabindex | ||
| 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b090:·6d65·6469·6174·696f·6e20· | 0003b090:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | ||
| 0003b0a0:· | 0003b0a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b0b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b0c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b0d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b0e0:·3633·3332·223e·3c74·6162·6c65·2063·6c61··6332"><table·cla | |||
| 0003b0f0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b0b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b0d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0e0:·6d36·3333·3222·3e3c·7461·626c·6520·636c··m6332"><table·cl | |||
| 0003b0f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b100:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b1 | 0003b100:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b110:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b120:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b130:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b140:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b150:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b160:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b120:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b130:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b140:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b150:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b160:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b170:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b180:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b190:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b1a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b1b0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b1 | 0003b170:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b180:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b1d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b1e0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b1f0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b200:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b210:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b220:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b230:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b240:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b250:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b260:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b270:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b280:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b290:·733a·0a20·202d·2043·4345·2d38·3332·3839··s:.··-·CCE-83289 | |||
| 0003b2a0:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b2b0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b2c0:·4947·2d53·4c45·532d·3135·2d30·3130·3431··IG-SLES-15-01041 | |||
| 0003b2d0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b2e0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b2f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b300:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b310:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b320:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b330:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b340:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b350:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b360:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b370:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b380:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b390:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b3a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b3b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b3c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b3d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b3e0:·6574·3d22·2369·646d·3633·3333·2220·7461··et="#idm6333"·ta | |||
| 0003b3f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b400:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b410:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b420:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b430:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b440:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b450:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b460:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b470:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b480:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b490:·643d·2269·646d·3633·3333·223e·3c74·6162··d="idm6333"><tab | |||
| 0003b4a0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b4b0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b4c0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b4d0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b4e0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b4f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b500:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b510:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b520:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b530:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b540:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b550:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b560:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b | 0003b190:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b1a0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b1b0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b1c0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b1d0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b1e0:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b1f0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b200:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b210:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b220:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b230:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b580:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b590:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b5a0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| Max diff block lines reached; 21261322/21284284 bytes (99.89%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·15 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·15 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 106, 67 lines modified | Offset 106, 67 lines modified | ||
| 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 109 | ·············_\x8c_\x8i_\x8s············1.4.1 | 109 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 118 | -·name:·Ensure·aide·is·installed | ||
| 119 | ··package: | ||
| 120 | ····name:·aide | ||
| 121 | ····state:·present | ||
| 122 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 123 | ··tags: | ||
| 124 | ··-·CCE-83289-9 | ||
| 125 | ··-·CJIS-5.10.1.3 | ||
| 126 | ··-·DISA-STIG-SLES-15-010419 | ||
| 127 | ··-·NIST-800-53-CM-6(a) | ||
| 128 | ··-·PCI-DSS-Req-11.5 | ||
| 129 | ··-·PCI-DSSv4-11.5.2 | ||
| 130 | ··-·enable_strategy | ||
| 131 | ··-·low_complexity | ||
| 132 | ··-·low_disruption | ||
| 133 | ··-·medium_severity | ||
| 134 | ··-·no_reboot_needed | ||
| 135 | ··-·package_aide_installed | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 141 | include·install_aide | 118 | include·install_aide |
| 142 | class·install_aide·{ | 119 | class·install_aide·{ |
| 143 | ··package·{·'aide': | 120 | ··package·{·'aide': |
| 144 | ····ensure·=>·'installed', | 121 | ····ensure·=>·'installed', |
| 145 | ··} | 122 | ··} |
| 146 | } | 123 | } |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | [[packages]] | ||
| 149 | name·=·"aide" | ||
| 150 | version·=·"*" | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | #·Remediation·is·applicable·only·in·certain·platforms | 129 | #·Remediation·is·applicable·only·in·certain·platforms |
| 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 130 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 158 | zypper·install·-y·"aide" | 131 | zypper·install·-y·"aide" |
| 159 | else | 132 | else |
| 160 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 133 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 161 | fi | 134 | fi |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | [[packages]] | ||
| 137 | name·=·"aide" | ||
| 138 | version·=·"*" | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | -·name:·Ensure·aide·is·installed | ||
| 145 | ··package: | ||
| 146 | ····name:·aide | ||
| 147 | ····state:·present | ||
| 148 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | ||
| 149 | ··tags: | ||
| 150 | ··-·CCE-83289-9 | ||
| 151 | ··-·CJIS-5.10.1.3 | ||
| 152 | ··-·DISA-STIG-SLES-15-010419 | ||
| 153 | ··-·NIST-800-53-CM-6(a) | ||
| 154 | ··-·PCI-DSS-Req-11.5 | ||
| 155 | ··-·PCI-DSSv4-11.5.2 | ||
| 156 | ··-·enable_strategy | ||
| 157 | ··-·low_complexity | ||
| 158 | ··-·low_disruption | ||
| 159 | ··-·medium_severity | ||
| 160 | ··-·no_reboot_needed | ||
| 161 | ··-·package_aide_installed | ||
| 162 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 162 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 163 | Run·the·following·command·to·generate·a·new·database: | 163 | Run·the·following·command·to·generate·a·new·database: |
| 164 | $·sudo·/usr/bin/aide·--init | 164 | $·sudo·/usr/bin/aide·--init |
| 165 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/ | 165 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/ |
| 166 | aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database | 166 | aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database |
| 167 | can·be·installed·as·follows: | 167 | can·be·installed·as·follows: |
| 168 | $·sudo·cp·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | 168 | $·sudo·cp·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db |
| Offset 190, 14 lines modified | Offset 190, 29 lines modified | ||
| 190 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 190 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 191 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 191 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 192 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 192 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 193 | ·············_\x8c_\x8i_\x8s············1.4.1 | 193 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 194 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 194 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 195 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 195 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 196 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 196 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 198 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 199 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | ||
| 200 | zypper·-q·--no-remote·ref | ||
| 201 | zypper·install·-y·"aide" | ||
| Max diff block lines reached; 1646499/1652030 bytes (99.67%) of diff not shown. | |||
| Offset 14319, 15 lines modified | Offset 14319, 15 lines modified | ||
| 00037ee0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037ee0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037ef0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037ef0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f00:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f00:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f10:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f10:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f20:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f20:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f30:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f30:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f40:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f40:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f50:·7320·6f66·2032·3032·342d·3131·2d30·3 | 00037f50:·7320·6f66·2032·3032·342d·3131·2d30·3729··s·of·2024-11-07) | ||
| 00037f60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f70:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f70:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f80:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f80:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037f90:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037f90:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fa0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fa0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fb0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fb0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fc0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fc0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15543, 456 lines modified | Offset 15543, 456 lines modified | ||
| 0003cb60:·612d·7461·7267·6574·3d22·2369·646d·3535··a-target="#idm55 | 0003cb60:·612d·7461·7267·6574·3d22·2369·646d·3535··a-target="#idm55 | ||
| 0003cb70:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 0003cb70:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003cb80:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003cb80:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003cb90:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003cb90:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003cba0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003cba0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003cbb0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003cbb0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (442 lines added, 442 lines removed) | |
| 0003cbc0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003cbc0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003cbd0:·7469·6f6e·20 | 0003cbd0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003cbe0:·7 | 0003cbe0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003cbf0:· | 0003cbf0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003cc00:·6 | 0003cc00:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003cc10:· | 0003cc10:·2220·6964·3d22·6964·6d35·3531·223e·3c70··"·id="idm551"><p | ||
| 0003cc20:· | 0003cc20:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003cc30:·6 | 0003cc30:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0003cc40:·6 | 0003cc40:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0003cc50:· | 0003cc50:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 0003cc60:·6 | 0003cc60:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | ||
| 0003cc70:· | 0003cc70:·2070·616d·3b20·7468·656e·0a0a·7661·725f···pam;·then..var_ | ||
| 0003cc80:· | 0003cc80:·7061·7373·776f·7264·5f70·616d·5f64·656c··password_pam_del | ||
| 0003cc90:· | 0003cc90:·6179·3d27·3c61·6262·7220·7469·746c·653d··ay='<abbr·title= | ||
| 0003cca0:·2 | 0003cca0:·2266·726f·6d20·5072·6f66·696c·652f·7265··"from·Profile/re | ||
| 0003ccb0:· | 0003ccb0:·6669·6e65·2d76·616c·7565·3a20·7863·6364··fine-value:·xccd | ||
| 0003ccc0:·6 | 0003ccc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 0003ccd0:· | 0003ccd0:·2e63·6f6e·7465·6e74·5f76·616c·7565·5f76··.content_value_v | ||
| 0003cce0:· | 0003cce0:·6172·5f70·6173·7377·6f72·645f·7061·6d5f··ar_password_pam_ | ||
| 0003ccf0:·6 | 0003ccf0:·6465·6c61·7922·3e34·3030·3030·3030·3c2f··delay">4000000</ | ||
| 0003cd00:· | 0003cd00:·6162·6272·3e27·0a0a·0a69·6620·5b20·2d65··abbr>'...if·[·-e | ||
| 0003cd10:· | 0003cd10:·2022·2f65·7463·2f70·616d·2e64·2f63·6f6d···"/etc/pam.d/com | ||
| 0003cd20:·6 | 0003cd20:·6d6f·6e2d·6175·7468·2220·5d20·3b20·7468··mon-auth"·]·;·th | ||
| 0003cd30:·6 | 0003cd30:·656e·0a20·2020·2076·616c·7565·5265·6765··en.····valueRege | ||
| 0003cd40:· | 0003cd40:·783d·2224·7661·725f·7061·7373·776f·7264··x="$var_password | ||
| 0003cd50:· | 0003cd50:·5f70·616d·5f64·656c·6179·2220·6465·6661··_pam_delay"·defa | ||
| 0003cd60:· | 0003cd60:·756c·7456·616c·7565·3d22·2476·6172·5f70··ultValue="$var_p | ||
| 0003cd70:· | 0003cd70:·6173·7377·6f72·645f·7061·6d5f·6465·6c61··assword_pam_dela | ||
| 0003cd80:· | 0003cd80:·7922·0a20·2020·2023·206e·6f6e·2d65·6d70··y".····#·non-emp | ||
| 0003cd90:· | 0003cd90:·7479·2076·616c·7565·7320·6e65·6564·2074··ty·values·need·t | ||
| 0003cda0:· | 0003cda0:·6f20·6265·2070·7265·6365·6465·6420·6279··o·be·preceded·by | ||
| 0003cdb0:·616 | 0003cdb0:·2061·6e20·6571·7561·6c73·2073·6967·6e0a···an·equals·sign. | ||
| 0003cdc0:·202 | 0003cdc0:·2020·2020·5b20·2d6e·2022·247b·7661·6c75······[·-n·"${valu | ||
| 0003cdd0:· | 0003cdd0:·6552·6567·6578·7d22·205d·2026·616d·703b··eRegex}"·]·& | ||
| 0003cde0:· | 0003cde0:·2661·6d70·3b20·7661·6c75·6552·6567·6578··&·valueRegex | ||
| 0003cdf0:· | 0003cdf0:·3d22·3d24·7b76·616c·7565·5265·6765·787d··="=${valueRegex} | ||
| 0003ce00:· | 0003ce00:·220a·2020·2020·2320·6164·6420·616e·2065··".····#·add·an·e | ||
| 0003ce10:· | 0003ce10:·7175·616c·7320·7369·676e·2074·6f20·6e6f··quals·sign·to·no | ||
| 0003ce20:·656 | 0003ce20:·6e2d·656d·7074·7920·7661·6c75·6573·0a20··n-empty·values.· | ||
| 0003ce30:· | 0003ce30:·2020·205b·202d·6e20·2224·7b64·6566·6175·····[·-n·"${defau | ||
| 0003ce40:· | 0003ce40:·6c74·5661·6c75·657d·2220·5d20·2661·6d70··ltValue}"·]·& | ||
| 0003ce50:· | 0003ce50:·3b26·616d·703b·2064·6566·6175·6c74·5661··;&·defaultVa | ||
| 0003ce60:·6 | 0003ce60:·6c75·653d·223d·247b·6465·6661·756c·7456··lue="=${defaultV | ||
| 0003ce70:· | 0003ce70:·616c·7565·7d22·0a0a·2020·2020·2320·6669··alue}"..····#·fi | ||
| 0003ce80:· | 0003ce80:·7820·2774·7970·6527·2069·6620·6974·2773··x·'type'·if·it's | ||
| 0003ce90:· | 0003ce90:·2077·726f·6e67·0a20·2020·2069·6620·6772···wrong.····if·gr | ||
| 0003cea0:·6 | 0003cea0:·6570·202d·7120·2d50·2022·5e5c·5c73·2a28··ep·-q·-P·"^\\s*( | ||
| 0003ceb0:· | 0003ceb0:·3f22·2721·2722·6175·7468·5c5c·7329·5b5b··?"'!'"auth\\s)[[ | ||
| 0003cec0:· | 0003cec0:·3a61·6c6e·756d·3a5d·5d2b·5c5c·732b·5b5b··:alnum:]]+\\s+[[ | ||
| 0003ced0:· | 0003ced0:·3a61·6c6e·756d·3a5d·5d2b·5c5c·732b·7061··:alnum:]]+\\s+pa | ||
| 0003cee0:· | 0003cee0:·6d5f·6661·696c·6465·6c61·792e·736f·2220··m_faildelay.so"· | ||
| 0003cef0:· | 0003cef0:·266c·743b·2022·2f65·7463·2f70·616d·2e64··<·"/etc/pam.d | ||
| 0003cf00:· | 0003cf00:·2f63·6f6d·6d6f·6e2d·6175·7468·2220·3b20··/common-auth"·;· | ||
| 0003cf10:· | 0003cf10:·7468·656e·0a20·2020·2020·2020·2073·6564··then.········sed | ||
| 0003cf20:· | 0003cf20:·202d·2d66·6f6c·6c6f·772d·7379·6d6c·696e···--follow-symlin | ||
| 0003cf30:·6 | 0003cf30:·6b73·202d·6920·2d45·202d·6520·2273·2f5e··ks·-i·-E·-e·"s/^ | ||
| 0003cf40:· | 0003cf40:·285c·5c73·2a29·5b5b·3a61·6c6e·756d·3a5d··(\\s*)[[:alnum:] | ||
| 0003cf50:·5 | 0003cf50:·5d2b·285c·5c73·2b5b·5b3a·616c·6e75·6d3a··]+(\\s+[[:alnum: | ||
| 0003cf60:· | 0003cf60:·5d5d·2b5c·5c73·2b70·616d·5f66·6169·6c64··]]+\\s+pam_faild | ||
| 0003cf70:·6 | 0003cf70:·656c·6179·2e73·6f29·2f5c·5c31·6175·7468··elay.so)/\\1auth | ||
| 0003cf80:· | 0003cf80:·5c5c·322f·2220·222f·6574·632f·7061·6d2e··\\2/"·"/etc/pam. | ||
| 0003cf90:· | 0003cf90:·642f·636f·6d6d·6f6e·2d61·7574·6822·0a20··d/common-auth".· | ||
| 0003cfa0:· | 0003cfa0:·2020·2066·690a·0a20·2020·2023·2066·6978·····fi..····#·fix | ||
| 0003cfb0:· | 0003cfb0:·2027·636f·6e74·726f·6c27·2069·6620·6974···'control'·if·it | ||
| 0003cfc0:·2 | 0003cfc0:·2773·2077·726f·6e67·0a20·2020·2069·6620··'s·wrong.····if· | ||
| 0003cfd0:· | 0003cfd0:·6772·6570·202d·7120·2d50·2022·5e5c·5c73··grep·-q·-P·"^\\s | ||
| 0003cfe0:· | 0003cfe0:·2a61·7574·685c·5c73·2b28·3f22·2721·2722··*auth\\s+(?"'!'" | ||
| 0003cff0:·7 | 0003cff0:·7265·7175·6972·6564·295b·5b3a·616c·6e75··required)[[:alnu | ||
| 0003d000:· | 0003d000:·6d3a·5d5d·2b5c·5c73·2b70·616d·5f66·6169··m:]]+\\s+pam_fai | ||
| 0003d010:· | 0003d010:·6c64·656c·6179·2e73·6f22·2026·6c74·3b20··ldelay.so"·<· | ||
| 0003d020:· | 0003d020:·222f·6574·632f·7061·6d2e·642f·636f·6d6d··"/etc/pam.d/comm | ||
| 0003d030:· | 0003d030:·6f6e·2d61·7574·6822·203b·2074·6865·6e0a··on-auth"·;·then. | ||
| 0003d040:· | 0003d040:·2020·2020·2020·2020·7365·6420·2d2d·666f··········sed·--fo | ||
| 0003d050:· | 0003d050:·6c6c·6f77·2d73·796d·6c69·6e6b·7320·2d69··llow-symlinks·-i | ||
| 0003d060:·20 | 0003d060:·202d·4520·2d65·2022·732f·5e28·5c5c·732a···-E·-e·"s/^(\\s* | ||
| 0003d070:·6 | 0003d070:·6175·7468·5c5c·732b·295b·5b3a·616c·6e75··auth\\s+)[[:alnu | ||
| 0003d080:·6 | 0003d080:·6d3a·5d5d·2b28·5c5c·732b·7061·6d5f·6661··m:]]+(\\s+pam_fa | ||
| 0003d090:·696 | 0003d090:·696c·6465·6c61·792e·736f·292f·5c5c·3172··ildelay.so)/\\1r | ||
| 0003d0a0:·6 | 0003d0a0:·6571·7569·7265·645c·5c32·2f22·2022·2f65··equired\\2/"·"/e | ||
| 0003d0b0:· | 0003d0b0:·7463·2f70·616d·2e64·2f63·6f6d·6d6f·6e2d··tc/pam.d/common- | ||
| 0003d0c0:·6 | 0003d0c0:·6175·7468·220a·2020·2020·6669·0a0a·2020··auth".····fi..·· | ||
| 0003d0d0:· | 0003d0d0:·2020·2320·6669·7820·7468·6520·7661·6c75····#·fix·the·valu | ||
| 0003d0e0:· | 0003d0e0:·6520·666f·7220·276f·7074·696f·6e27·2069··e·for·'option'·i | ||
| 0003d0f0:·6 | 0003d0f0:·6620·6f6e·6520·6578·6973·7473·2062·7574··f·one·exists·but | ||
| 0003d100:· | 0003d100:·2064·6f65·7320·6e6f·7420·6d61·7463·6820···does·not·match· | ||
| 0003d110:· | 0003d110:·2776·616c·7565·5265·6765·7827·0a20·2020··'valueRegex'.··· | ||
| 0003d120:· | 0003d120:·2069·6620·6772·6570·202d·7120·2d50·2022···if·grep·-q·-P·" | ||
| 0003d130:· | 0003d130:·5e5c·5c73·2a61·7574·685c·5c73·2b72·6571··^\\s*auth\\s+req | ||
| 0003d140:·7 | 0003d140:·7569·7265·645c·5c73·2b70·616d·5f66·6169··uired\\s+pam_fai | ||
| 0003d150:·6 | 0003d150:·6c64·656c·6179·2e73·6f28·5c5c·732e·2b29··ldelay.so(\\s.+) | ||
| 0003d160:· | 0003d160:·3f5c·5c73·2b64·656c·6179·283f·2227·2127··?\\s+delay(?"'!' | ||
| 0003d170:·2 | 0003d170:·2224·7b76·616c·7565·5265·6765·787d·285c··"${valueRegex}(\ | ||
| 0003d180:· | 0003d180:·5c73·7c5c·2429·2922·2026·6c74·3b20·222f··\s|\$))"·<·"/ | ||
| 0003d190:· | 0003d190:·6574·632f·7061·6d2e·642f·636f·6d6d·6f6e··etc/pam.d/common | ||
| 0003d1a0:·2 | 0003d1a0:·2d61·7574·6822·203b·2074·6865·6e0a·2020··-auth"·;·then.·· | ||
| 0003d1b0:· | 0003d1b0:·2020·2020·2020·7365·6420·2d2d·666f·6c6c········sed·--foll | ||
| 0003d1c0:·7 | 0003d1c0:·6f77·2d73·796d·6c69·6e6b·7320·2d69·202d··ow-symlinks·-i·- | ||
| 0003d1d0:· | 0003d1d0:·4520·2d65·2022·732f·5e28·5c5c·732a·6175··E·-e·"s/^(\\s*au | ||
| 0003d1e0:· | 0003d1e0:·7468·5c5c·732b·7265·7175·6972·6564·5c5c··th\\s+required\\ | ||
| 0003d1f0:· | 0003d1f0:·732b·7061·6d5f·6661·696c·6465·6c61·792e··s+pam_faildelay. | ||
| 0003d200:·7 | 0003d200:·736f·285c·5c73·2e2b·293f·5c5c·7329·6465··so(\\s.+)?\\s)de | ||
| 0003d210:·6 | 0003d210:·6c61·793d·5b5e·5b3a·7370·6163·653a·5d5d··lay=[^[:space:]] | ||
| 0003d220:· | 0003d220:·2a2f·5c5c·3164·656c·6179·247b·6465·6661··*/\\1delay${defa | ||
| 0003d230:· | 0003d230:·756c·7456·616c·7565·7d2f·2220·222f·6574··ultValue}/"·"/et | ||
| Max diff block lines reached; 4869120/4931826 bytes (98.73%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:sle-microos:5.2 | 41 | ····*·cpe:/o:suse:sle-microos:5.2 |
| 42 | ····*·cpe:/o:suse:sle-micro:5.3 | 42 | ····*·cpe:/o:suse:sle-micro:5.3 |
| 43 | ····*·cpe:/o:suse:sle-micro:5.4 | 43 | ····*·cpe:/o:suse:sle-micro:5.4 |
| 44 | ····*·cpe:/o:suse:sle-micro:5.5 | 44 | ····*·cpe:/o:suse:sle-micro:5.5 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········3.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 53 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 54 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 54 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| Offset 149, 14 lines modified | Offset 149, 67 lines modified | ||
| 149 | Severity: ···medium | 149 | Severity: ···medium |
| 150 | Rule·ID:·····xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faildelay_delay | 150 | Rule·ID:·····xccdf_org.ssgproject.content_rule_accounts_passwords_pam_faildelay_delay |
| 151 | Identifiers:·CCE-94092-4 | 151 | Identifiers:·CCE-94092-4 |
| 152 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 152 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 153 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00226 | 153 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00226 |
| 154 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-412025 | 154 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-412025 |
| 155 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261365r996541_rule | 155 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261365r996541_rule |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 157 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 158 | if·rpm·--quiet·-q·pam;·then | ||
| 159 | var_password_pam_delay='4000000' | ||
| 160 | if·[·-e·"/etc/pam.d/common-auth"·]·;·then | ||
| 161 | ····valueRegex="$var_password_pam_delay"·defaultValue="$var_password_pam_delay" | ||
| 162 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 163 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 164 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 165 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 166 | ····#·fix·'type'·if·it's·wrong | ||
| 167 | ····if·grep·-q·-P·"^\\s*(?"'!'"auth\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_faildelay.so"·<·"/etc/ | ||
| 168 | pam.d/common-auth"·;·then | ||
| 169 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum: | ||
| 170 | ]]+\\s+pam_faildelay.so)/\\1auth\\2/"·"/etc/pam.d/common-auth" | ||
| 171 | ····fi | ||
| 172 | ····#·fix·'control'·if·it's·wrong | ||
| 173 | ····if·grep·-q·-P·"^\\s*auth\\s+(?"'!'"required)[[:alnum:]]+\\s+pam_faildelay.so"·<·"/etc/pam.d/ | ||
| 174 | common-auth"·;·then | ||
| 175 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+)[[:alnum:]]+(\\s+pam_faildelay.so)/ | ||
| 176 | \\1required\\2/"·"/etc/pam.d/common-auth" | ||
| 177 | ····fi | ||
| 178 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 179 | ····if·grep·-q·-P·"^\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s+delay(?"'!'"${valueRegex} | ||
| 180 | (\\s|\$))"·<·"/etc/pam.d/common-auth"·;·then | ||
| 181 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+required\\s+pam_faildelay.so | ||
| 182 | (\\s.+)?\\s)delay=[^[:space:]]*/\\1delay${defaultValue}/"·"/etc/pam.d/common-auth" | ||
| 183 | ····#·add·'option=default'·if·option·is·not·set | ||
| 184 | ····elif·grep·-q·-E·"^\\s*auth\\s+required\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·&& | ||
| 185 | ············grep····-E·"^\\s*auth\\s+required\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·| | ||
| 186 | grep·-q·-E·-v·"\\sdelay(=|\\s|\$)"·;·then | ||
| 187 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+required\\s+pam_faildelay.so[^\\n]*)/\\1 | ||
| 188 | delay${defaultValue}/"·"/etc/pam.d/common-auth" | ||
| 189 | ····#·add·a·new·entry·if·none·exists | ||
| 190 | ····elif·!·grep·-q·-P·"^\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s+delay${valueRegex} | ||
| 191 | (\\s|\$)"·<·"/etc/pam.d/common-auth"·;·then | ||
| 192 | ········echo·"auth·required·pam_faildelay.so·delay${defaultValue}"·>>·"/etc/pam.d/common-auth" | ||
| 193 | ····fi | ||
| 194 | else | ||
| 195 | ····echo·"/etc/pam.d/common-auth·doesn't·exist"·>&2 | ||
| 196 | fi | ||
| 197 | else | ||
| 198 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 199 | fi | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 161 | -·name:·Gather·the·package·facts | 205 | -·name:·Gather·the·package·facts |
| 162 | ··package_facts: | 206 | ··package_facts: |
| Offset 295, 80 lines modified | Offset 348, 97 lines modified | ||
| 295 | ··-·DISA-STIG-SLEM-05-412025 | 348 | ··-·DISA-STIG-SLEM-05-412025 |
| 296 | ··-·accounts_passwords_pam_faildelay_delay | 349 | ··-·accounts_passwords_pam_faildelay_delay |
| 297 | ··-·low_complexity | 350 | ··-·low_complexity |
| 298 | ··-·low_disruption | 351 | ··-·low_disruption |
| 299 | ··-·medium_severity | 352 | ··-·medium_severity |
| 300 | ··-·no_reboot_needed | 353 | ··-·no_reboot_needed |
| 301 | ··-·restrict_strategy | 354 | ··-·restrict_strategy |
| 355 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·S\x8SL\x8LE\x8EM\x8M·5\x85·m\x8mu\x8us\x8st\x8t·u\x8us\x8se\x8e·t\x8th\x8he\x8e·d\x8de\x8ef\x8fa\x8au\x8ul\x8lt\x8t·p\x8pa\x8am\x8m_\x8_t\x8ta\x8al\x8ll\x8ly\x8y2\x82·t\x8ta\x8al\x8ll\x8ly\x8y·d\x8di\x8ir\x8re\x8ec\x8ct\x8to\x8or\x8ry\x8y.\x8.·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 356 | This·rule·configures·the·system·to·use·default·pam_tally2·tally·directory | ||
| 357 | ·············By·limiting·the·number·of·failed·logon·attempts,·the·risk·of·unauthorized·system | ||
| 358 | Rationale:···access·via·user·password·guessing,·otherwise·known·as·brute-force·attacks,·is | ||
| 359 | ·············reduced.·Limits·are·imposed·by·locking·the·account. | ||
| 360 | Severity: ···medium | ||
| 361 | Rule·ID:·····xccdf_org.ssgproject.content_rule_accounts_passwords_pam_tally2_file | ||
| 362 | Identifiers:·CCE-94089-0 | ||
| 363 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000044 | ||
| 364 | ·············_\x8n_\x8i_\x8s_\x8t····AC-7(a) | ||
| 365 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000021-GPOS-00005 | ||
| 366 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-412030 | ||
| 367 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261366r996837_rule | ||
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 368 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 369 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 370 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 371 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 372 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 303 | #·Remediation·is·applicable·only·in·certain·platforms | 373 | #·Remediation·is·applicable·only·in·certain·platforms |
| 304 | if·rpm·--quiet·-q·pam;·then | 374 | if·rpm·--quiet·-q·pam;·then |
| 305 | 375 | declare·-a·VALUES=() | |
| 376 | declare·-a·VALUE_NAMES=() | ||
| 377 | declare·-a·ARGS=() | ||
| 378 | declare·-a·NEW_ARGS=() | ||
| 379 | declare·-a·DEL_ARGS=() | ||
| 380 | VALUES+=("") | ||
| 381 | VALUE_NAMES+=("") | ||
| 382 | ARGS+=("file") | ||
| 383 | NEW_ARGS+=("") | ||
| 384 | DEL_ARGS+=("file=") | ||
| 306 | if·[·-e·"/etc/pam.d/common-auth"·]·;·then | ||
| 307 | ····valueRegex="$var_password_pam_delay"·defaultValue="$var_password_pam_delay" | ||
| 308 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| Max diff block lines reached; 389823/395815 bytes (98.49%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d10:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d20:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d20:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037d30:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037d30:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037d40:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037d40:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d50:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d50:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d60:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d60:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d80:·6173·206f·6620·3230·3234·2d31·312d·303 | 00037d80:·6173·206f·6620·3230·3234·2d31·312d·3037··as·of·2024-11-07 | ||
| 00037d90:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d90:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037da0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037da0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037db0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037db0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037dc0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037dc0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037dd0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037dd0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037de0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037de0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037df0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037df0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 16132, 173 lines modified | Offset 16132, 173 lines modified | ||
| 0003f030:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003f030:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003f040:·6d38·3633·2220·7461·6269·6e64·6578·3d22··m863"·tabindex=" | 0003f040:·6d38·3633·2220·7461·6269·6e64·6578·3d22··m863"·tabindex=" | ||
| 0003f050:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003f050:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003f060:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003f060:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003f070:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003f070:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003f080:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003f080:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003f090:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003f090:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003f0a0:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003f0b0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003f0c0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003f0d0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003f0e0:·7073·6522·2069·643d·2269·646d·3836·3322··pse"·id="idm863" | |||
| 0003f0a0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003f0b0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003f0c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003f0d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003f0e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003f0f0:·3633·223e·3c74·6162·6c65·2063·6c61·7373··63"><table·class | |||
| 0003f100:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003f110:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003f120:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003f130:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003f140:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003f150:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003f160:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003f170:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003f180:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003f190:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003f1a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003f1b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003f1c0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 0003f1d0:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 0003f | 0003f0f0:·3e3c·7072·653e·3c63·6f64·653e·0a76·6172··><pre><code>.var | ||
| 0003f1f0:·6e61·6d65·3a20·5843·4344·4620·5661·6c75··name:·XCCDF·Valu | |||
| 0003f200:·6520·7661·725f·7379·7374·656d·5f63·7279··e·var_system_cry | |||
| 0003f210:·7074·6f5f·706f·6c69·6379·2023·2070·726f··pto_policy·#·pro | |||
| 0003f220:·6d6f·7465·2074·6f20·7661·7269·6162·6c65··mote·to·variable | |||
| 0003f230:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | |||
| 0003f | 0003f100:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | ||
| 0003f110:·6f6c·6963·793d·273c·6162·6272·2074·6974··olicy='<abbr·tit | |||
| 0003f120:·6c65·3d22·6672·6f6d·2042·656e·6368·6d61··le="from·Benchma | |||
| 0003f130:·726b·2f56·616c·7565·3a20·7863·6364·665f··rk/Value:·xccdf_ | |||
| 0003f140:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | |||
| 0003f150:·6f6e·7465·6e74·5f76·616c·7565·5f76·6172··ontent_value_var | |||
| 0003f160:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003f170:·6f6c·6963·7922·3e44·4546·4155·4c54·3c2f··olicy">DEFAULT</ | |||
| 0003f180:·6162·6272·3e27·0a0a·0a73·7464·6572·725f··abbr>'...stderr_ | |||
| 0003f190:·6f66·5f63·616c·6c3d·2428·7570·6461·7465··of_call=$(update | |||
| 0003f1a0:·2d63·7279·7074·6f2d·706f·6c69·6369·6573··-crypto-policies | |||
| 0003f250:·746f·5f70·6f6c·6963·793a·2021·2173·7472··to_policy:·!!str | |||
| 0003f260:·203c·6162·6272·2074·6974·6c65·3d22·6672···<abbr·title="fr | |||
| 0003f270:·6f6d·2042·656e·6368·6d61·726b·2f56·616c··om·Benchmark/Val | |||
| 0003f280:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | |||
| 0003f290:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | |||
| 0003f2a0:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | |||
| 0003f2b0:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | |||
| 0003f2c0:·3e44·4546·4155·4c54·3c2f·6162·6272·3e0a··>DEFAULT</abbr>. | |||
| 0003f2d0:·2020·7461·6773·3a0a·2020·2020·2d20·616c····tags:.····-·al | |||
| 0003f2e0:·7761·7973·0a0a·2d20·6e61·6d65·3a20·436f··ways..-·name:·Co | |||
| 0003f2f0:·6e66·6967·7572·6520·5379·7374·656d·2043··nfigure·System·C | |||
| 0003f300:·7279·7074·6f67·7261·7068·7920·506f·6c69··ryptography·Poli | |||
| 0003f310:·6379·0a20·206c·696e·6569·6e66·696c·653a··cy.··lineinfile: | |||
| 0003f320:·0a20·2020·2070·6174·683a·202f·6574·632f··.····path:·/etc/ | |||
| 0003f330:·6372·7970·746f·2d70·6f6c·6963·6965·732f··crypto-policies/ | |||
| 0003f340:·636f·6e66·6967·0a20·2020·2072·6567·6578··config.····regex | |||
| 0003f350:·703a·205e·283f·2123·2928·5c53·2b29·240a··p:·^(?!#)(\S+)$. | |||
| 0003f360:·2020·2020·6c69·6e65·3a20·277b·7b20·7661······line:·'{{·va | |||
| 0003f370:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 0003f380:·706f·6c69·6379·207d·7d27·0a20·2020·2063··policy·}}'.····c | |||
| 0003f390:·7265·6174·653a·2074·7275·650a·2020·7461··reate:·true.··ta | |||
| 0003f3a0:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 0003f3b0:·2d35·332d·4143·2d31·3728·3229·0a20·202d··-53-AC-17(2).··- | |||
| 0003f3c0:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | |||
| 0003f3d0:·3137·2861·290a·2020·2d20·4e49·5354·2d38··17(a).··-·NIST-8 | |||
| 0003f3e0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003f3f0:·2d20·4e49·5354·2d38·3030·2d35·332d·4d41··-·NIST-800-53-MA | |||
| 0003f400:·2d34·2836·290a·2020·2d20·4e49·5354·2d38··-4(6).··-·NIST-8 | |||
| 0003f410:·3030·2d35·332d·5343·2d31·3228·3229·0a20··00-53-SC-12(2).· | |||
| 0003f420:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003f430:·432d·3132·2833·290a·2020·2d20·4e49·5354··C-12(3).··-·NIST | |||
| 0003f440:·2d38·3030·2d35·332d·5343·2d31·330a·2020··-800-53-SC-13.·· | |||
| 0003f450:·2d20·5043·492d·4453·5376·342d·322e·322e··-·PCI-DSSv4-2.2. | |||
| 0003f460:·370a·2020·2d20·636f·6e66·6967·7572·655f··7.··-·configure_ | |||
| 0003f470:·6372·7970·746f·5f70·6f6c·6963·790a·2020··crypto_policy.·· | |||
| 0003f480:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | |||
| 0003f490:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003f4a0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003f4b0:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | |||
| 0003f4c0:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 0003f4d0:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 0003f4e0:·0a0a·2d20·6e61·6d65·3a20·5665·7269·6679··..-·name:·Verify | |||
| 0003f4f0:·2074·6861·7420·4372·7970·746f·2050·6f6c···that·Crypto·Pol | |||
| 0003f500:·6963·7920·6973·2053·6574·2028·7275·6e74··icy·is·Set·(runt | |||
| 0003f510:·696d·6529·0a20·2063·6f6d·6d61·6e64·3a20··ime).··command:· | |||
| 0003f520:·2f75·7372·2f62·696e·2f75·7064·6174·652d··/usr/bin/update- | |||
| 0003f530:·6372·7970·746f·2d70·6f6c·6963·6965·7320··crypto-policies· | |||
| 0003f | 0003f1b0:·202d·2d73·6574·2024·7b76·6172·5f73·7973···--set·${var_sys | ||
| 0003f | 0003f1c0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003f560:·7920·7d7d·0a20·2074·6167·733a·0a20·202d··y·}}.··tags:.··- | |||
| 0003f570:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | |||
| 0003f580:·3137·2832·290a·2020·2d20·4e49·5354·2d38··17(2).··-·NIST-8 | |||
| 0003f590:·3030·2d35·332d·4143·2d31·3728·6129·0a20··00-53-AC-17(a).· | |||
| 0003f5a0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003f5b0:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | |||
| 0003f5c0:·3830·302d·3533·2d4d·412d·3428·3629·0a20··800-53-MA-4(6).· | |||
| 0003f5d0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003f5e0:·432d·3132·2832·290a·2020·2d20·4e49·5354··C-12(2).··-·NIST | |||
| 0003f5f0:·2d38·3030·2d35·332d·5343·2d31·3228·3329··-800-53-SC-12(3) | |||
| 0003f600:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003f610:·2d53·432d·3133·0a20·202d·2050·4349·2d44··-SC-13.··-·PCI-D | |||
| 0003f620:·5353·7634·2d32·2e32·2e37·0a20·202d·2063··SSv4-2.2.7.··-·c | |||
| Max diff block lines reached; 303628/327280 bytes (92.77%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·UnionTech·OS·Server·20 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·UnionTech·OS·Server·20 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:uos:uniontech_os_server:20 | 43 | ····*·cpe:/o:uos:uniontech_os_server:20 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-0 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2024-11-07) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 275, 14 lines modified | Offset 275, 34 lines modified | ||
| 275 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 275 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 276 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 276 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 277 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4), | 277 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4), |
| 278 | ·····················FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 278 | ·····················FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 279 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS- | 279 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS- |
| 280 | ·····················000394-GPOS-00174 | 280 | ·····················000394-GPOS-00174 |
| 281 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 281 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 283 | var_system_crypto_policy='DEFAULT' | ||
| 284 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/ | ||
| 285 | dev/null) | ||
| 286 | rc=$? | ||
| 287 | if·test·"$rc"·=·127;·then | ||
| 288 | » echo·"$stderr_of_call"·>&2 | ||
| 289 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 290 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 291 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 292 | » false··#·end·with·an·error·code | ||
| 293 | elif·test·"$rc"·!=·0;·then | ||
| 294 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 295 | » false··#·end·with·an·error·code | ||
| 296 | fi | ||
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 283 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 284 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 285 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 286 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 287 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 302 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 288 | ··set_fact: | 303 | ··set_fact: |
| Offset 325, 34 lines modified | Offset 345, 14 lines modified | ||
| 325 | ··-·PCI-DSSv4-2.2.7 | 345 | ··-·PCI-DSSv4-2.2.7 |
| 326 | ··-·configure_crypto_policy | 346 | ··-·configure_crypto_policy |
| 327 | ··-·high_severity | 347 | ··-·high_severity |
| 328 | ··-·low_complexity | 348 | ··-·low_complexity |
| 329 | ··-·low_disruption | 349 | ··-·low_disruption |
| 330 | ··-·no_reboot_needed | 350 | ··-·no_reboot_needed |
| 331 | ··-·restrict_strategy | 351 | ··-·restrict_strategy |
| 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 333 | var_system_crypto_policy='DEFAULT' | ||
| 334 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/ | ||
| 335 | dev/null) | ||
| 336 | rc=$? | ||
| 337 | if·test·"$rc"·=·127;·then | ||
| 338 | » echo·"$stderr_of_call"·>&2 | ||
| 339 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 340 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 341 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 342 | » false··#·end·with·an·error·code | ||
| 343 | elif·test·"$rc"·!=·0;·then | ||
| 344 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 345 | » false··#·end·with·an·error·code | ||
| 346 | fi | ||
| 347 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 352 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 348 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many | 353 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many |
| 349 | packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set | 354 | packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set |
| 350 | up·to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured | 355 | up·to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured |
| 351 | correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies | 356 | correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies |
| 352 | targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists, | 357 | targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists, |
| 353 | Kerberos·is·configured·to·use·the·system-wide·crypto·policy·settings. | 358 | Kerberos·is·configured·to·use·the·system-wide·crypto·policy·settings. |
| Offset 360, 14 lines modified | Offset 360, 22 lines modified | ||
| 360 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. | 360 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 361 | Severity: ··high | 361 | Severity: ··high |
| 362 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy | 362 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy |
| 363 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 | 363 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 |
| 364 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 364 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 365 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) | 365 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) |
| 366 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000120-GPOS-00061 | 366 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000120-GPOS-00061 |
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 370 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 371 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 372 | rm·-f·/etc/krb5.conf.d/crypto-policies | ||
| 373 | ln·-s·/etc/crypto-policies/back-ends/krb5.config·/etc/krb5.conf.d/crypto-policies | ||
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 370 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 371 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 372 | -·name:·Configure·Kerberos·to·use·System·Crypto·Policy | 379 | -·name:·Configure·Kerberos·to·use·System·Crypto·Policy |
| 373 | ··file: | 380 | ··file: |
| Offset 380, 22 lines modified | Offset 388, 14 lines modified | ||
| 380 | ··-·NIST-800-53-SC-13 | 388 | ··-·NIST-800-53-SC-13 |
| 381 | ··-·configure_kerberos_crypto_policy | 389 | ··-·configure_kerberos_crypto_policy |
| 382 | ··-·configure_strategy | 390 | ··-·configure_strategy |
| 383 | ··-·high_severity | 391 | ··-·high_severity |
| 384 | ··-·low_complexity | 392 | ··-·low_complexity |
| 385 | ··-·low_disruption | 393 | ··-·low_disruption |
| 386 | ··-·reboot_required | 394 | ··-·reboot_required |
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 392 | rm·-f·/etc/krb5.conf.d/crypto-policies | ||
| 393 | ln·-s·/etc/crypto-policies/back-ends/krb5.config·/etc/krb5.conf.d/crypto-policies | ||
| 394 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·L\x8Li\x8ib\x8br\x8re\x8es\x8sw\x8wa\x8an\x8n·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 395 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·L\x8Li\x8ib\x8br\x8re\x8es\x8sw\x8wa\x8an\x8n·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 395 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many | 396 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many |
| 396 | packages.·Libreswan·is·supported·by·system·crypto·policy,·but·the·Libreswan | 397 | packages.·Libreswan·is·supported·by·system·crypto·policy,·but·the·Libreswan |
| Max diff block lines reached; 27241/33443 bytes (81.46%) of diff not shown. | |||
| Offset 63, 274 lines modified | Offset 63, 274 lines modified | ||
| 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | ||
| 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | ||
| 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | ||
| 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | ||
| 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | ||
| 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | ||
| 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | ||
| 00000450:·3c74·643e·456e·7375·7265·2053·4d41·5020··<td>Ensure·SMAP· | |||
| 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | |||
| 00000470:·6475·7269·6e67·2062·6f6f·743c·2f74·643e··during·boot</td> | |||
| 00000450:·3c74·643e·496e·7374·616c·6c20·5041·4520··<td>Install·PAE· | |||
| 00000460:·4b65·726e·656c·206f·6e20·5375·7070·6f72··Kernel·on·Suppor | |||
| 00000470:·7465·6420·3332·2d62·6974·2078·3836·2053··ted·32-bit·x86·S | |||
| 00000480:·7973·7465·6d73·3c2f·7464·3e0a·2020·2020··ystems</td>.···· | |||
| 00000490:·2020·3c74·6420·786d·6c3a·6c61·6e67·3d22····<td·xml:lang=" | |||
| 000004a0:·656e·2d55·5322·3e0a·2020·2020·2020·2020··en-US">.········ | |||
| 000004b0:·5379·7374·656d·7320·7468·6174·2061·7265··Systems·that·are | |||
| 000004c0:·2075·7369·6e67·2074·6865·2036·342d·6269···using·the·64-bi | |||
| 000004d0:·7420·7838·3620·6b65·726e·656c·2070·6163··t·x86·kernel·pac | |||
| 000004e0:·6b61·6765·0a64·6f20·6e6f·7420·6e65·6564··kage.do·not·need | |||
| 000004f0:·2074·6f20·696e·7374·616c·6c20·7468·6520···to·install·the· | |||
| 00000500:·6b65·726e·656c·2d50·4145·2070·6163·6b61··kernel-PAE·packa | |||
| 00000510:·6765·2062·6563·6175·7365·2074·6865·2036··ge·because·the·6 | |||
| 00000520:·342d·6269·740a·7838·3620·6b65·726e·656c··4-bit.x86·kernel | |||
| 00000530:·2061·6c72·6561·6479·2069·6e63·6c75·6465···already·include | |||
| 00000540:·7320·7468·6973·2073·7570·706f·7274·2e20··s·this·support.· | |||
| 00000550:·486f·7765·7665·722c·2069·6620·7468·6520··However,·if·the· | |||
| 00000560:·7379·7374·656d·2069·730a·3332·2d62·6974··system·is.32-bit | |||
| 00000570:·2061·6e64·2061·6c73·6f20·7375·7070·6f72···and·also·suppor | |||
| 00000580:·7473·2074·6865·2050·4145·2061·6e64·204e··ts·the·PAE·and·N | |||
| 00000590:·5820·6665·6174·7572·6573·2061·730a·6465··X·features·as.de | |||
| 000005a0:·7465·726d·696e·6564·2069·6e20·7468·6520··termined·in·the· | |||
| 000005b0:·7072·6576·696f·7573·2073·6563·7469·6f6e··previous·section | |||
| 000005c0:·2c20·7468·6520·6b65·726e·656c·2d50·4145··,·the·kernel-PAE | |||
| 000005d0:·2070·6163·6b61·6765·2073·686f·756c·640a···package·should. | |||
| 000005e0:·6265·2069·6e73·7461·6c6c·6564·2074·6f20··be·installed·to· | |||
| 000005f0:·656e·6162·6c65·2058·4420·6f72·204e·5820··enable·XD·or·NX· | |||
| 00000600:·7375·7070·6f72·742e·0a54·6865·203c·636f··support..The·<co | |||
| 00000610:·6465·3e6b·6572·6e65·6c2d·5041·453c·2f63··de>kernel-PAE</c | |||
| 00000620:·6f64·653e·2070·6163·6b61·6765·2063·616e··ode>·package·can | |||
| 00000630:·2062·6520·696e·7374·616c·6c65·6420·7769···be·installed·wi | |||
| 00000640:·7468·2074·6865·2066·6f6c·6c6f·7769·6e67··th·the·following | |||
| 00000650:·2063·6f6d·6d61·6e64·3a0a·3c70·7265·3e0a···command:.<pre>. | |||
| 00000660:·2420·7375·646f·2079·756d·2069·6e73·7461··$·sudo·yum·insta | |||
| 00000670:·6c6c·206b·6572·6e65·6c2d·5041·453c·2f70··ll·kernel-PAE</p | |||
| 00000680:·7265·3e0a·5468·6520·696e·7374·616c·6c61··re>.The·installa | |||
| 00000690:·7469·6f6e·2070·726f·6365·7373·2073·686f··tion·process·sho | |||
| 000006a0:·756c·6420·616c·736f·2068·6176·6520·636f··uld·also·have·co | |||
| 000006b0:·6e66·6967·7572·6564·2074·6865·0a62·6f6f··nfigured·the.boo | |||
| 000006c0:·746c·6f61·6465·7220·746f·206c·6f61·6420··tloader·to·load· | |||
| 000006d0:·7468·6520·6e65·7720·6b65·726e·656c·2061··the·new·kernel·a | |||
| 000006e0:·7420·626f·6f74·2e20·5665·7269·6679·2074··t·boot.·Verify·t | |||
| 000006f0:·6869·7320·6166·7465·7220·7265·626f·6f74··his·after·reboot | |||
| 00000700:·0a61·6e64·206d·6f64·6966·7920·3c74·743e··.and·modify·<tt> | |||
| 00000710:·2f65·7463·2f64·6566·6175·6c74·2f67·7275··/etc/default/gru | |||
| 00000720:·623c·2f74·743e·2069·6620·6e65·6365·7373··b</tt>·if·necess | |||
| 00000730:·6172·792e·0a20·2020·2020·203c·2f74·643e··ary..······</td> | |||
| 00000 | 00000480:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000 | 00000490:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 000004a0:·2020·2020·2054·6865·2053·4d41·5020·6973·······The·SMAP·is | |||
| 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | |||
| 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | |||
| 000004d0:·6d6f·6465·2066·726f·6d20·756e·696e·7465··mode·from·uninte | |||
| 000004e0:·6e74·696f·6e61·6c6c·7920·7265·6164·696e··ntionally·readin | |||
| 000004f0:·672f·7772·6974·696e·6720·696e·746f·0a6d··g/writing·into.m | |||
| 00000500:·656d·6f72·7920·7061·6765·7320·696e·2074··emory·pages·in·t | |||
| 00000510:·6865·2075·7365·7220·7370·6163·652c·2069··he·user·space,·i | |||
| 00000760:·2020·2020·204f·6e20·3332·2d62·6974·2073·······On·32-bit·s | |||
| 00000770:·7973·7465·6d73·2074·6861·7420·7375·7070··ystems·that·supp | |||
| 00000780:·6f72·7420·7468·6520·5844·206f·7220·4e58··ort·the·XD·or·NX | |||
| 00000790:·2062·6974·2c20·7468·6520·7665·6e64·6f72···bit,·the·vendor | |||
| 000007a0:·2d73·7570·706c·6965·640a·5041·4520·6b65··-supplied.PAE·ke | |||
| 000007b0:·726e·656c·2069·7320·7265·7175·6972·6564··rnel·is·required | |||
| 000007c0:·2074·6f20·656e·6162·6c65·2065·6974·6865···to·enable·eithe | |||
| 000007d0:·7220·4578·6563·7574·6520·4469·7361·626c··r·Execute·Disabl | |||
| 000007e0:·6520·2858·4429·206f·7220·4e6f·2045·7865··e·(XD)·or·No·Exe | |||
| 000007f0:·6375·7465·2028·4e58·2920·7375·7070·6f72··cute·(NX)·suppor | |||
| 00000800:·742e·0a20·2020·2020·203c·2f74·643e·0a20··t..······</td>.· | |||
| 00000810:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | |||
| 00000820:·3e0a·2020·2020·2020·3c74·643e·5231·3c2f··>.······<td>R1</ | |||
| 00000830:·7464·3e0a·2020·2020·2020·3c74·643e·456e··td>.······<td>En | |||
| 00000840:·7375·7265·2053·4d45·5020·6973·206e·6f74··sure·SMEP·is·not | |||
| 00000850:·2064·6973·6162·6c65·6420·6475·7269·6e67···disabled·during | |||
| 00000860:·2062·6f6f·743c·2f74·643e·0a20·2020·2020···boot</td>.····· | |||
| 00000870:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | |||
| 00000880:·6e2d·5553·223e·0a20·2020·2020·2020·2054··n-US">.········T | |||
| 00000890:·6865·2053·4d45·5020·6973·2075·7365·6420··he·SMEP·is·used· | |||
| 000008a0:·746f·2070·7265·7665·6e74·2074·6865·2073··to·prevent·the·s | |||
| 000008b0:·7570·6572·7669·736f·7220·6d6f·6465·2066··upervisor·mode·f | |||
| 000008c0:·726f·6d20·6578·6563·7574·696e·6720·7573··rom·executing·us | |||
| 000008d0:·6572·2073·7061·6365·2063·6f64·652c·0a69··er·space·code,.i | |||
| 00000 | 00000520:·7420·6973·2065·6e61·626c·6564·2062·7920··t·is·enabled·by· | ||
| 00000 | 00000530:·6465·6661·756c·7420·7369·6e63·6520·4c69··default·since·Li | ||
| 00000 | 00000540:·6e75·7820·6b65·726e·656c·2033·2e37·2e0a··nux·kernel·3.7.. | ||
| 00000 | 00000550:·4275·7420·6974·2063·6f75·6c64·2062·6520··But·it·could·be· | ||
| 00000 | 00000560:·6469·7361·626c·6564·2074·6872·6f75·6768··disabled·through | ||
| 00000 | 00000570:·206b·6572·6e65·6c20·626f·6f74·2070·6172···kernel·boot·par | ||
| 00000 | 00000580:·616d·6574·6572·732e·0a0a·456e·7375·7265··ameters...Ensure | ||
| 00000 | 00000590:·2074·6861·7420·5375·7065·7276·6973·6f72···that·Supervisor | ||
| 000005a0:·204d·6f64·6520·4163·6365·7373·2050·7265···Mode·Access·Pre | |||
| 000005b0:·7665·6e74·696f·6e20·2853·4d41·5029·2069··vention·(SMAP)·i | |||
| 00000960:·204d·6f64·6520·4578·6563·7574·696f·6e20···Mode·Execution· | |||
| 00000970:·5072·6576·656e·7469·6f6e·2028·534d·4550··Prevention·(SMEP | |||
| 00000980:·2920·6973·206e·6f74·2064·6973·6162·6c65··)·is·not·disable | |||
| 00000990:·6420·6279·0a74·6865·203c·7474·3e6e·6f73··d·by.the·<tt>nos | |||
| 000009a0:·6d65·703c·2f74·743e·2062·6f6f·7420·7061··mep</tt>·boot·pa | |||
| 000009b0:·7261·6d65·6e74·6572·206f·7074·696f·6e2e··ramenter·option. | |||
| 000009c0:·0a0a·4368·6563·6b20·7468·6174·2074·6865··..Check·that·the | |||
| 000009d0:·206c·696e·6520·3c70·7265·3e47·5255·425f···line·<pre>GRUB_ | |||
| 000009e0:·434d·444c·494e·455f·4c49·4e55·583d·222e··CMDLINE_LINUX=". | |||
| 000009f0:·2e2e·223c·2f70·7265·3e20·7769·7468·696e··.."</pre>·within | |||
| 00000a00:·203c·7474·3e2f·6574·632f·6465·6661·756c···<tt>/etc/defaul | |||
| 00000a10:·742f·6772·7562·3c2f·7474·3e0a·646f·6573··t/grub</tt>.does | |||
| 00000a20:·6e27·7420·636f·6e74·6169·6e20·7468·6520··n't·contain·the· | |||
| 00000a30:·6172·6775·6d65·6e74·203c·7474·3e6e·6f73··argument·<tt>nos | |||
| 00000a40:·6d65·703c·2f74·743e·2e0a·5275·6e20·7468··mep</tt>..Run·th | |||
| 00000a50:·6520·666f·6c6c·6f77·696e·6720·636f·6d6d··e·following·comm | |||
| 00000a60:·616e·6420·746f·2075·7064·6174·6520·636f··and·to·update·co | |||
| 00000a70:·6d6d·616e·6420·6c69·6e65·2066·6f72·2061··mmand·line·for·a | |||
| 00000a80:·6c72·6561·6479·2069·6e73·7461·6c6c·6564··lready·installed | |||
| 00000a90:·206b·6572·6e65·6c73·3a0a·3c70·7265·3e23···kernels:.<pre># | |||
| 00000aa0:·2067·7275·6262·7920·2d2d·7570·6461·7465···grubby·--update | |||
| 00000ab0:·2d6b·6572·6e65·6c3d·414c·4c20·2d2d·7265··-kernel=ALL·--re | |||
| 00000ac0:·6d6f·7665·2d61·7267·733d·226e·6f73·6d65··move-args="nosme | |||
| 00000ad0:·7022·3c2f·7072·653e·0a20·2020·2020·203c··p"</pre>.······< | |||
| 00000ae0:·2f74·643e·0a20·2020·2020·203c·7464·2078··/td>.······<td·x | |||
| 00000af0:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> | |||
| Max diff block lines reached; 2953741/2990195 bytes (98.78%) of diff not shown. | |||
| Offset 1, 13 lines modified | Offset 1, 29 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux |
| 2 | 7 | 2 | 7 |
| 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 4 | ······························mode·from·unintentionally·reading/writing | ||
| 5 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 6 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 7 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 8 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 10 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 11 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 12 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 13 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 14 | ······························argument·nosmap.·Run·the·following·command | ||
| 15 | ······························to·update·command·line·for·already·installed | ||
| 16 | ······························kernels: | ||
| 17 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 18 | ······························args="nosmap" | ||
| 3 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 19 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 4 | ······························package·do·not·need·to·install·the·kernel- | 20 | ······························package·do·not·need·to·install·the·kernel- |
| 5 | ······························PAE·package·because·the·64-bit·x86·kernel | 21 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 6 | ······························already·includes·this·support.·However,·if | 22 | ······························already·includes·this·support.·However,·if |
| 7 | ······························the·system·is·32-bit·and·also·supports·the | 23 | ······························the·system·is·32-bit·and·also·supports·the |
| 8 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 24 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 9 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 25 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 15, 14 lines modified | Offset 31, 30 lines modified | ||
| 15 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 31 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 16 | ······························installed·with·the·following·command:········(NX)·support. | 32 | ······························installed·with·the·following·command:········(NX)·support. |
| 17 | ······························$·sudo·yum·install·kernel-PAE | 33 | ······························$·sudo·yum·install·kernel-PAE |
| 18 | ······························The·installation·process·should·also·have | 34 | ······························The·installation·process·should·also·have |
| 19 | ······························configured·the·bootloader·to·load·the·new | 35 | ······························configured·the·bootloader·to·load·the·new |
| 20 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 36 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 21 | ······························modify·/etc/default/grub·if·necessary. | 37 | ······························modify·/etc/default/grub·if·necessary. |
| 38 | ···········································································Use·of·a·64-bit·operating·system | ||
| 39 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 40 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 41 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 42 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 43 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 44 | ···········································································bits. | ||
| 45 | ···········································································Use·of·weak·or·untested·encryption | ||
| 46 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 47 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 48 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 49 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 50 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 51 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 52 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 53 | ···········································································validated. | ||
| 22 | ······························The·SMEP·is·used·to·prevent·the·supervisor | 54 | ······························The·SMEP·is·used·to·prevent·the·supervisor |
| 23 | ······························mode·from·executing·user·space·code,·it·is | 55 | ······························mode·from·executing·user·space·code,·it·is |
| 24 | ······························enabled·by·default·since·Linux·kernel·3.0. | 56 | ······························enabled·by·default·since·Linux·kernel·3.0. |
| 25 | ······························But·it·could·be·disabled·through·kernel·boot | 57 | ······························But·it·could·be·disabled·through·kernel·boot |
| 26 | ······························parameters.·Ensure·that·Supervisor·Mode | 58 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 27 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | 59 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate |
| 28 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | 60 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain |
| Offset 30, 46 lines modified | Offset 62, 14 lines modified | ||
| 30 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 62 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 31 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 63 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 32 | ······························argument·nosmep.·Run·the·following·command | 64 | ······························argument·nosmep.·Run·the·following·command |
| 33 | ······························to·update·command·line·for·already·installed | 65 | ······························to·update·command·line·for·already·installed |
| 34 | ······························kernels: | 66 | ······························kernels: |
| 35 | ······························#·grubby·--update-kernel=ALL·--remove- | 67 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 36 | ······························args="nosmep" | 68 | ······························args="nosmep" |
| 37 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 38 | ······························mode·from·unintentionally·reading/writing | ||
| 39 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 40 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 41 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 42 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 43 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 44 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 45 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 46 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 47 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 48 | ······························argument·nosmap.·Run·the·following·command | ||
| 49 | ······························to·update·command·line·for·already·installed | ||
| 50 | ······························kernels: | ||
| 51 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 52 | ······························args="nosmap" | ||
| 53 | ···········································································Use·of·weak·or·untested·encryption | ||
| 54 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 55 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 56 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 57 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 58 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 59 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 60 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 61 | ···········································································validated. | ||
| 62 | ···········································································Use·of·a·64-bit·operating·system | ||
| 63 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 64 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 65 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 66 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 67 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 68 | ···········································································bits. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 90 lines modified | Offset 99, 70 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ···········································································The·CONFIG_SHUFFLE_PAGE_ALLOCATOR | ||
| 107 | ······························To·enable·randomization·of·the·page··········config·option·is·primarily·focused·on | ||
| 108 | ······························allocator·in·the·kernel,·add·the·············improving·the·average·utilization·of·a | ||
| 109 | ······························page_alloc.shuffle=1·argument·to·the·default·direct-mapped·memory-side-cache.·Aside | ||
| 110 | ······························GRUB·2·command·line.·To·ensure·that··········of·this·performance·effect,·it·also | ||
| 111 | ······························page_alloc.shuffle=1·is·added·as·a·kernel····reduces·predictability·of·page | ||
| 112 | ······························command·line·argument·to·newly·installed·····allocations·in·situations·when·the·bad | ||
| 113 | ······························kernels,·add·page_alloc.shuffle=1·to·the·····actor·can·crash·the·system·and·somehow | ||
| 114 | R8··Enable·randomization·of···default·Grub2·command·line·for·Linux·········leverage·knowledge·of·(page) | ||
| 115 | ····the·page·allocator········operating·systems.·Modify·the·line·within·/··allocation·order·right·after·a·fresh | ||
| 116 | ······························etc/default/grub·as·shown·below:·············reboot,·or·can·control·the·timing | ||
| 117 | ······························GRUB_CMDLINE_LINUX="...·page_alloc.shuffle=1·between·a·hot-pluggable·memory·node | ||
| Max diff block lines reached; 668323/681171 bytes (98.11%) of diff not shown. | |||
| Offset 40, 26 lines modified | Offset 40, 83 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1</td> | ||
| 48 | ······<td>Disable·GDM·Automatic·Login</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | ||
| 51 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 52 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 53 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 54 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 55 | <pre>[daemon] | ||
| 56 | AutomaticLoginEnable=false</pre> | ||
| 57 | ······</td> | ||
| 58 | ······<td·xml:lang="en-US"> | ||
| 59 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 60 | system·security. | ||
| 61 | ······</td> | ||
| 62 | ····</tr> | ||
| 63 | ····<tr> | ||
| 64 | ······<td>3.1.1<br/>3.4.5</td> | ||
| 65 | ······<td>Require·Authentication·for·Emergency·Systemd·Target</td> | ||
| 66 | ······<td·xml:lang="en-US"> | ||
| 67 | ········Emergency·mode·is·intended·as·a·system·recovery | ||
| 68 | method,·providing·a·single·user·root·access·to·the·system | ||
| 69 | during·a·failed·boot·sequence. | ||
| 70 | <br·/><br·/> | ||
| 71 | By·default,·Emergency·mode·is·protected·by·requiring·a·password·and·is·set | ||
| 72 | in·<tt>/usr/lib/systemd/system/emergency.service</tt>. | ||
| 73 | ······</td> | ||
| 74 | ······<td·xml:lang="en-US"> | ||
| 75 | ········This·prevents·attackers·with·physical·access·from·trivially·bypassing·security | ||
| 76 | on·the·machine·and·gaining·root·access.·Such·accesses·are·further·prevented | ||
| 77 | by·configuring·the·bootloader·password. | ||
| 78 | ······</td> | ||
| 79 | ····</tr> | ||
| 80 | ····<tr> | ||
| 47 | ······<td>3.1.1<br/>3.1.5</td> | 81 | ······<td>3.1.1<br/>3.1.5</td> |
| 48 | ······<td> | 82 | ······<td>Disable·SSH·Root·Login</td> |
| 49 | ······<td·xml:lang="en-US"> | 83 | ······<td·xml:lang="en-US"> |
| 50 | ········To·restrict·root·logins·on·serial·ports, | ||
| 51 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 52 | <pre>ttyS0 | ||
| 53 | t | 84 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 85 | system·directly·over·a·network. | ||
| 86 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 87 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 88 | <pre>PermitRootLogin·no</pre> | ||
| 54 | ······</td> | 89 | ······</td> |
| 55 | ······<td·xml:lang="en-US"> | 90 | ······<td·xml:lang="en-US"> |
| 56 | ········Preventing·direct·root·login·to·serial·port·interfaces | ||
| 57 | helps·ensure·accountability·for·actions·taken·on·the·systems | ||
| 58 | 91 | ········Even·though·the·communications·channel·may·be·encrypted,·an·additional·layer·of | |
| 92 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | ||
| 93 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | ||
| 94 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | ||
| 95 | direct·attack·attempts·on·root's·password. | ||
| 96 | ······</td> | ||
| 97 | ····</tr> | ||
| 98 | ····<tr> | ||
| 99 | ······<td>3.1.1<br/>3.4.5</td> | ||
| 100 | ······<td>Require·Authentication·for·Single·User·Mode</td> | ||
| 101 | ······<td·xml:lang="en-US"> | ||
| 102 | ········Single-user·mode·is·intended·as·a·system·recovery | ||
| 103 | method,·providing·a·single·user·root·access·to·the·system·by | ||
| 104 | providing·a·boot·option·at·startup. | ||
| 105 | <br·/><br·/> | ||
| 106 | By·default,·single-user·mode·is·protected·by·requiring·a·password·and·is·set | ||
| 107 | in·<tt>/usr/lib/systemd/system/rescue.service</tt>. | ||
| 108 | ······</td> | ||
| 109 | ······<td·xml:lang="en-US"> | ||
| 110 | ········This·prevents·attackers·with·physical·access·from·trivially·bypassing·security | ||
| 111 | on·the·machine·and·gaining·root·access.·Such·accesses·are·further·prevented | ||
| 112 | by·configuring·the·bootloader·password. | ||
| 59 | ······</td> | 113 | ······</td> |
| 60 | ····</tr> | 114 | ····</tr> |
| 61 | ····<tr> | 115 | ····<tr> |
| 62 | ······<td>3.1.1<br/>3.1.5</td> | 116 | ······<td>3.1.1<br/>3.1.5</td> |
| 63 | ······<td>Verify·Only·Root·Has·UID·0</td> | 117 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 64 | ······<td·xml:lang="en-US"> | 118 | ······<td·xml:lang="en-US"> |
| 65 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | 119 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should |
| Offset 77, 14 lines modified | Offset 134, 31 lines modified | ||
| 77 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | 134 | guess·a·password·for·a·privileged·account.·Proper·configuration·of |
| 78 | sudo·is·recommended·to·afford·multiple·system·administrators | 135 | sudo·is·recommended·to·afford·multiple·system·administrators |
| 79 | access·to·root·privileges·in·an·accountable·manner. | 136 | access·to·root·privileges·in·an·accountable·manner. |
| 80 | ······</td> | 137 | ······</td> |
| 81 | ····</tr> | 138 | ····</tr> |
| 82 | ····<tr> | 139 | ····<tr> |
| 83 | ······<td>3.1.1<br/>3.1.5</td> | 140 | ······<td>3.1.1<br/>3.1.5</td> |
| 141 | ······<td>Restrict·Virtual·Console·Root·Logins</td> | ||
| 142 | ······<td·xml:lang="en-US"> | ||
| 143 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 144 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 145 | <pre>vc/1 | ||
| 146 | vc/2 | ||
| 147 | vc/3 | ||
| 148 | vc/4</pre> | ||
| 149 | ······</td> | ||
| 150 | ······<td·xml:lang="en-US"> | ||
| 151 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 152 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 153 | using·the·root·account. | ||
| 154 | ······</td> | ||
| 155 | ····</tr> | ||
| 156 | ····<tr> | ||
| 157 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 84 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | 158 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> |
| 85 | ······<td·xml:lang="en-US"> | 159 | ······<td·xml:lang="en-US"> |
| 86 | ········If·an·account·is·configured·for·password·authentication | 160 | ········If·an·account·is·configured·for·password·authentication |
| 87 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | 161 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log |
| 88 | into·the·account·without·authentication.·Remove·any·instances·of·the | 162 | into·the·account·without·authentication.·Remove·any·instances·of·the |
| 89 | <tt>nullok</tt>·in | 163 | <tt>nullok</tt>·in |
| Offset 96, 48 lines modified | Offset 170, 14 lines modified | ||
| 96 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| 97 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | 171 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and |
| 98 | run·commands·with·the·privileges·of·that·account.·Accounts·with | 172 | run·commands·with·the·privileges·of·that·account.·Accounts·with |
| 99 | empty·passwords·should·never·be·used·in·operational·environments. | 173 | empty·passwords·should·never·be·used·in·operational·environments. |
| 100 | ······</td> | 174 | ······</td> |
| 101 | ····</tr> | 175 | ····</tr> |
| Max diff block lines reached; 455570/460595 bytes (98.91%) of diff not shown. | |||
| Offset 1, 21 lines modified | Offset 1, 66 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of |
| 2 | Oracle·Linux·7 | 2 | Oracle·Linux·7 |
| 3 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 4 | ·······································automatically·login·without·user·interaction·or | ||
| 5 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | ||
| 6 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | ||
| 7 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users | ||
| 8 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts | ||
| 9 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system | ||
| 10 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. | ||
| 11 | ·······································[daemon] | ||
| 12 | ·······································AutomaticLoginEnable=false | ||
| 13 | ······························································································This·prevents | ||
| 14 | ······························································································attackers·with | ||
| 15 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | ||
| 16 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | ||
| 17 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | ||
| 18 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | ||
| 19 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | ||
| 20 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | ||
| 21 | ·······································emergency.service.·····································prevented·by | ||
| 22 | ······························································································configuring·the | ||
| 23 | ······························································································bootloader·password. | ||
| 3 | ······························································································ | 24 | ······························································································Even·though·the |
| 25 | ······························································································communications | ||
| 26 | ······························································································channel·may·be | ||
| 27 | ······························································································encrypted,·an | ||
| 28 | ······························································································additional·layer·of | ||
| 4 | ······························································································ | 29 | ······························································································security·is·gained |
| 5 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 6 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 7 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 8 | ·······································ttyS1··················································actions·taken·on·the | ||
| 9 | ······························································································ | 30 | ······························································································by·extending·the |
| 31 | ······························································································policy·of·not | ||
| 32 | ·······································The·root·user·should·never·be·allowed·to·login·to·a····logging·directly·on | ||
| 33 | 3.1.1··································system·directly·over·a·network.·To·disable·root·login··as·root.·In | ||
| 34 | 3.1.5···Disable·SSH·Root·Login·········via·SSH,·add·or·correct·the·following·line·in·/etc/····addition,·logging·in | ||
| 35 | ·······································ssh/sshd_config:·······································with·a·user-specific | ||
| 36 | ·······································PermitRootLogin·no·····································account·provides | ||
| 37 | ······························································································individual | ||
| 10 | ······························································································ | 38 | ······························································································accountability·of |
| 39 | ······························································································actions·performed·on | ||
| 40 | ······························································································the·system·and·also | ||
| 41 | ······························································································helps·to·minimize | ||
| 42 | ······························································································direct·attack | ||
| 43 | ······························································································attempts·on·root's | ||
| 44 | ······························································································password. | ||
| 45 | ······························································································This·prevents | ||
| 46 | ······························································································attackers·with | ||
| 47 | ·······································Single-user·mode·is·intended·as·a·system·recovery······physical·access·from | ||
| 48 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | ||
| 49 | 3.1.1···Require·Authentication·for·····system·by·providing·a·boot·option·at·startup.··········security·on·the | ||
| 50 | 3.4.5···Single·User·Mode······································································machine·and·gaining | ||
| 51 | ·······································By·default,·single-user·mode·is·protected·by·requiring·root·access.·Such | ||
| 52 | ·······································a·password·and·is·set·in·/usr/lib/systemd/system/······accesses·are·further | ||
| 53 | ·······································rescue.service.········································prevented·by | ||
| 54 | ······························································································configuring·the | ||
| 55 | ······························································································bootloader·password. | ||
| 11 | ······························································································An·account·has·root | 56 | ······························································································An·account·has·root |
| 12 | ······························································································authority·if·it·has | 57 | ······························································································authority·if·it·has |
| 13 | ······························································································a·UID·of·0.·Multiple | 58 | ······························································································a·UID·of·0.·Multiple |
| 14 | ······························································································accounts·with·a·UID | 59 | ······························································································accounts·with·a·UID |
| 15 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | 60 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more |
| 16 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | 61 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for |
| 17 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | 62 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders |
| Offset 26, 85 lines modified | Offset 71, 51 lines modified | ||
| 26 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended | 71 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended |
| 27 | ·······································assigned.··············································to·afford·multiple | 72 | ·······································assigned.··············································to·afford·multiple |
| 28 | ······························································································system | 73 | ······························································································system |
| 29 | ······························································································administrators | 74 | ······························································································administrators |
| 30 | ······························································································access·to·root | 75 | ······························································································access·to·root |
| 31 | ······························································································privileges·in·an | 76 | ······························································································privileges·in·an |
| 32 | ······························································································accountable·manner. | 77 | ······························································································accountable·manner. |
| 78 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 79 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 80 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 81 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 82 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 83 | ·······································vc/3···················································actions·taken·on·the | ||
| 84 | ·······································vc/4···················································system·using·the | ||
| 85 | ······························································································root·account. | ||
| 33 | ······························································································If·an·account·has·an | 86 | ······························································································If·an·account·has·an |
| 34 | ······························································································empty·password, | 87 | ······························································································empty·password, |
| 35 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | 88 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in |
| 36 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | 89 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands |
| 37 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | 90 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges |
| 38 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | 91 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. |
| 39 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | 92 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty |
| 40 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | 93 | ·······································prevent·logins·with·empty·passwords.···················passwords·should |
| 41 | ······························································································never·be·used·in | 94 | ······························································································never·be·used·in |
| 42 | ······························································································operational | 95 | ······························································································operational |
| 43 | ······························································································environments. | 96 | ······························································································environments. |
| 44 | ······························································································This·prevents | ||
| 45 | ······························································································attackers·with | ||
| 46 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | ||
| 47 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | ||
| 48 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | ||
| 49 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | ||
| 50 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | ||
| 51 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | ||
| 52 | ·······································emergency.service.·····································prevented·by | ||
| 53 | ······························································································configuring·the | ||
| 54 | ······························································································bootloader·password. | ||
| 55 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 56 | ·······································automatically·login·without·user·interaction·or | ||
| 57 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | ||
| 58 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | ||
| 59 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users | ||
| 60 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts | ||
| 61 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system | ||
| 62 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. | ||
| 63 | ·······································[daemon] | ||
| 64 | ·······································AutomaticLoginEnable=false | ||
| 65 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | 97 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to |
| 66 | ·······································login·without·credentials·which·can·be·useful·for | 98 | ·······································login·without·credentials·which·can·be·useful·for |
| 67 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | 99 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict |
| 68 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | 100 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to |
| 69 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | 101 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users |
| 70 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | 102 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts |
| 71 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | 103 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system |
| 72 | ·······································etc/gdm/custom.conf.·For·example:······················security. | 104 | ·······································etc/gdm/custom.conf.·For·example:······················security. |
| 73 | ·······································[daemon] | 105 | ·······································[daemon] |
| Max diff block lines reached; 799856/813575 bytes (98.31%) of diff not shown. | |||
| Offset 7705, 18 lines modified | Offset 7705, 18 lines modified | ||
| 0001e180:·776f·7264·7320·6865·6c70·7320·656e·7375··words·helps·ensu | 0001e180:·776f·7264·7320·6865·6c70·7320·656e·7375··words·helps·ensu | ||
| 0001e190:·7265·2074·6861·7420·6120·636f·6d70·726f··re·that·a·compro | 0001e190:·7265·2074·6861·7420·6120·636f·6d70·726f··re·that·a·compro | ||
| 0001e1a0:·6d69·7365·6420·7061·7373·776f·7264·2069··mised·password·i | 0001e1a0:·6d69·7365·6420·7061·7373·776f·7264·2069··mised·password·i | ||
| 0001e1b0:·7320·6e6f·740a·7265·2d75·7365·6420·6279··s·not.re-used·by | 0001e1b0:·7320·6e6f·740a·7265·2d75·7365·6420·6279··s·not.re-used·by | ||
| 0001e1c0:·2061·2075·7365·722e·0a20·203c·2f74·643e···a·user..··</td> | 0001e1c0:·2061·2075·7365·722e·0a20·203c·2f74·643e···a·user..··</td> | ||
| 0001e1d0:·0a20·203c·7464·3e76·6172·5f70·6173·7377··.··<td>var_passw | 0001e1d0:·0a20·203c·7464·3e76·6172·5f70·6173·7377··.··<td>var_passw | ||
| 0001e1e0:·6f72·645f·7061·6d5f·7265·6d65·6d62·6572··ord_pam_remember | 0001e1e0:·6f72·645f·7061·6d5f·7265·6d65·6d62·6572··ord_pam_remember | ||
| 0001e1f0:·3d35·3c62·722f·3e76·6172·5f70·6173·7377··=5<br/>var_passw | |||
| 0001e200:·6f72·645f·7061·6d5f·7265·6d65·6d62·6572··ord_pam_remember | |||
| 0001e | 0001e210:·5f63·6f6e·7472·6f6c·5f66·6c61·673d·7265··_control_flag=re | ||
| 0001e200:·7175·6972·6564·3c62·722f·3e76·6172·5f70··quired<br/>var_p | |||
| 0001e210:·6173·7377·6f72·645f·7061·6d5f·7265·6d65··assword_pam_reme | |||
| 0001e220:· | 0001e220:·7175·6972·6564·3c2f·7464·3e0a·3c2f·7472··quired</td>.</tr | ||
| 0001e230:·3e0a·3c74·723e·0a20·203c·7464·3e49·412d··>.<tr>.··<td>IA- | 0001e230:·3e0a·3c74·723e·0a20·203c·7464·3e49·412d··>.<tr>.··<td>IA- | ||
| 0001e240:·3528·6629·3c62·722f·3e49·412d·3528·3129··5(f)<br/>IA-5(1) | 0001e240:·3528·6629·3c62·722f·3e49·412d·3528·3129··5(f)<br/>IA-5(1) | ||
| 0001e250:·2865·293c·2f74·643e·0a20·203c·7464·3e4e··(e)</td>.··<td>N | 0001e250:·2865·293c·2f74·643e·0a20·203c·7464·3e4e··(e)</td>.··<td>N | ||
| 0001e260:·2f41·3c2f·7464·3e0a·2020·3c74·643e·4c69··/A</td>.··<td>Li | 0001e260:·2f41·3c2f·7464·3e0a·2020·3c74·643e·4c69··/A</td>.··<td>Li | ||
| 0001e270:·6d69·7420·5061·7373·776f·7264·2052·6575··mit·Password·Reu | 0001e270:·6d69·7420·5061·7373·776f·7264·2052·6575··mit·Password·Reu | ||
| 0001e280:·7365·3a20·7379·7374·656d·2d61·7574·683c··se:·system-auth< | 0001e280:·7365·3a20·7379·7374·656d·2d61·7574·683c··se:·system-auth< | ||
| 0001e290:·2f74·643e·0a20·203c·7464·2078·6d6c·3a6c··/td>.··<td·xml:l | 0001e290:·2f74·643e·0a20·203c·7464·2078·6d6c·3a6c··/td>.··<td·xml:l | ||
| Offset 7754, 19 lines modified | Offset 7754, 19 lines modified | ||
| 0001e490:·6576·696f·7573·2070·6173·7377·6f72·6473··evious·passwords | 0001e490:·6576·696f·7573·2070·6173·7377·6f72·6473··evious·passwords | ||
| 0001e4a0:·2068·656c·7073·2065·6e73·7572·6520·7468···helps·ensure·th | 0001e4a0:·2068·656c·7073·2065·6e73·7572·6520·7468···helps·ensure·th | ||
| 0001e4b0:·6174·2061·2063·6f6d·7072·6f6d·6973·6564··at·a·compromised | 0001e4b0:·6174·2061·2063·6f6d·7072·6f6d·6973·6564··at·a·compromised | ||
| 0001e4c0:·2070·6173·7377·6f72·6420·6973·206e·6f74···password·is·not | 0001e4c0:·2070·6173·7377·6f72·6420·6973·206e·6f74···password·is·not | ||
| 0001e4d0:·0a72·652d·7573·6564·2062·7920·6120·7573··.re-used·by·a·us | 0001e4d0:·0a72·652d·7573·6564·2062·7920·6120·7573··.re-used·by·a·us | ||
| 0001e4e0:·6572·2e0a·2020·3c2f·7464·3e0a·2020·3c74··er..··</td>.··<t | 0001e4e0:·6572·2e0a·2020·3c2f·7464·3e0a·2020·3c74··er..··</td>.··<t | ||
| 0001e4f0:·643e·7661·725f·7061·7373·776f·7264·5f70··d>var_password_p | 0001e4f0:·643e·7661·725f·7061·7373·776f·7264·5f70··d>var_password_p | ||
| 0001e500:·616d·5f72·656d·656d·6265·723d·353c·6272··am_remember=5<br | |||
| 0001e510:·2f3e·7661·725f·7061·7373·776f·7264·5f70··/>var_password_p | |||
| 0001e5 | 0001e520:·616d·5f72·656d·656d·6265·725f·636f·6e74··am_remember_cont | ||
| 0001e5 | 0001e530:·726f·6c5f·666c·6167·3d72·6571·7569·7265··rol_flag=require | ||
| 0001e520:·643c·6272·2f3e·7661·725f·7061·7373·776f··d<br/>var_passwo | |||
| 0001e530:·7264·5f70·616d·5f72·656d·656d·6265·723d··rd_pam_remember= | |||
| 0001e540:· | 0001e540:·643c·2f74·643e·0a3c·2f74·723e·0a3c·7472··d</td>.</tr>.<tr | ||
| 0001e550:·3e0a·2020·3c74·643e·4941·2d35·2863·293c··>.··<td>IA-5(c)< | 0001e550:·3e0a·2020·3c74·643e·4941·2d35·2863·293c··>.··<td>IA-5(c)< | ||
| 0001e560:·6272·2f3e·4941·2d35·2831·2928·6129·3c62··br/>IA-5(1)(a)<b | 0001e560:·6272·2f3e·4941·2d35·2831·2928·6129·3c62··br/>IA-5(1)(a)<b | ||
| 0001e570:·722f·3e43·4d2d·3628·6129·3c62·722f·3e49··r/>CM-6(a)<br/>I | 0001e570:·722f·3e43·4d2d·3628·6129·3c62·722f·3e49··r/>CM-6(a)<br/>I | ||
| 0001e580:·412d·3528·3429·3c2f·7464·3e0a·2020·3c74··A-5(4)</td>.··<t | 0001e580:·412d·3528·3429·3c2f·7464·3e0a·2020·3c74··A-5(4)</td>.··<t | ||
| 0001e590:·643e·4e2f·413c·2f74·643e·0a20·203c·7464··d>N/A</td>.··<td | 0001e590:·643e·4e2f·413c·2f74·643e·0a20·203c·7464··d>N/A</td>.··<td | ||
| 0001e5a0:·3e45·6e73·7572·6520·5041·4d20·456e·666f··>Ensure·PAM·Enfo | 0001e5a0:·3e45·6e73·7572·6520·5041·4d20·456e·666f··>Ensure·PAM·Enfo | ||
| 0001e5b0:·7263·6573·2050·6173·7377·6f72·6420·5265··rces·Password·Re | 0001e5b0:·7263·6573·2050·6173·7377·6f72·6420·5265··rces·Password·Re | ||
| Offset 8613, 18 lines modified | Offset 8613, 18 lines modified | ||
| 00021a40:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | 00021a40:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | ||
| 00021a50:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | 00021a50:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | ||
| 00021a60:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | 00021a60:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | ||
| 00021a70:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | 00021a70:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | ||
| 00021a80:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | 00021a80:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | ||
| 00021a90:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | 00021a90:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | ||
| 00021aa0:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | 00021aa0:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | ||
| 00021ab0:·725f·736e·6d70·645f·72 | 00021ab0:·725f·736e·6d70·645f·726f·5f73·7472·696e··r_snmpd_ro_strin | ||
| 00021ac0:·673d·6368·616e·6765·6d65·72 | 00021ac0:·673d·6368·616e·6765·6d65·726f·3c62·722f··g=changemero<br/ | ||
| 00021ad0:·3e76·6172·5f73·6e6d·7064·5f72· | 00021ad0:·3e76·6172·5f73·6e6d·7064·5f72·775f·7374··>var_snmpd_rw_st | ||
| 00021ae0:·7269·6e67·3d63·6861·6e67·656d·6572· | 00021ae0:·7269·6e67·3d63·6861·6e67·656d·6572·773c··ring=changemerw< | ||
| 00021af0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | 00021af0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | ||
| 00021b00:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | 00021b00:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | ||
| 00021b10:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | 00021b10:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | ||
| 00021b20:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | 00021b20:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | ||
| 00021b30:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | 00021b30:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | ||
| 00021b40:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | 00021b40:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | ||
| 00021b50:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack | 00021b50:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack |
| Offset 2580, 28 lines modified | Offset 2580, 28 lines modified | ||
| 2580 | ··············································································ensuring·a·larger | 2580 | ··············································································ensuring·a·larger |
| 2581 | ··············································································search·space. | 2581 | ··············································································search·space. |
| 2582 | ··································Do·not·allow·users·to·reuse·recent | 2582 | ··································Do·not·allow·users·to·reuse·recent |
| 2583 | ··································passwords.·This·can·be·accomplished·by | 2583 | ··································passwords.·This·can·be·accomplished·by |
| 2584 | ··································using·the·remember·option·for·the···········Preventing·re-use | 2584 | ··································using·the·remember·option·for·the···········Preventing·re-use |
| 2585 | ··································pam_pwhistory·PAM·module.···················of·previous | 2585 | ··································pam_pwhistory·PAM·module.···················of·previous |
| 2586 | IA-5(f)·······································································passwords·helps | 2586 | IA-5(f)·······································································passwords·helps |
| 2587 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/password-auth,·make··ensure·that·a·······var_password_pam_remember | 2587 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/password-auth,·make··ensure·that·a·······var_password_pam_remember=5 |
| 2588 | (e)·····A··password-auth··········sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember= | 2588 | (e)·····A··password-auth··········sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember_control_flag=required |
| 2589 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- | 2589 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- |
| 2590 | ··············································································used·by·a·user. | 2590 | ··············································································used·by·a·user. |
| 2591 | ··································For·example: | 2591 | ··································For·example: |
| 2592 | ··································password·required·pam_pwhistory.so | 2592 | ··································password·required·pam_pwhistory.so |
| 2593 | ··································use_authtok·remember=5 | 2593 | ··································use_authtok·remember=5 |
| 2594 | ··································Do·not·allow·users·to·reuse·recent | 2594 | ··································Do·not·allow·users·to·reuse·recent |
| 2595 | ··································passwords.·This·can·be·accomplished·by | 2595 | ··································passwords.·This·can·be·accomplished·by |
| 2596 | ··································using·the·remember·option·for·the···········Preventing·re-use | 2596 | ··································using·the·remember·option·for·the···········Preventing·re-use |
| 2597 | ··································pam_pwhistory·PAM·module.···················of·previous | 2597 | ··································pam_pwhistory·PAM·module.···················of·previous |
| 2598 | IA-5(f)·······································································passwords·helps | 2598 | IA-5(f)·······································································passwords·helps |
| 2599 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/system-auth,·make····ensure·that·a·······var_password_pam_remember | 2599 | IA-5(1)·N/·Limit·Password·Reuse:··In·the·file·/etc/pam.d/system-auth,·make····ensure·that·a·······var_password_pam_remember=5 |
| 2600 | (e)·····A··system-auth············sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember= | 2600 | (e)·····A··system-auth············sure·the·parameter·remember·is·present·and··compromised·········var_password_pam_remember_control_flag=required |
| 2601 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- | 2601 | ··································it·has·a·value·equal·to·or·greater·than·5···password·is·not·re- |
| 2602 | ··············································································used·by·a·user. | 2602 | ··············································································used·by·a·user. |
| 2603 | ··································For·example: | 2603 | ··································For·example: |
| 2604 | ··································password·required·pam_pwhistory.so | 2604 | ··································password·required·pam_pwhistory.so |
| 2605 | ··································use_authtok·remember=5 | 2605 | ··································use_authtok·remember=5 |
| 2606 | ··············································································Use·of·a·complex | 2606 | ··············································································Use·of·a·complex |
| 2607 | ··············································································password·helps·to | 2607 | ··············································································password·helps·to |
| Offset 2913, 16 lines modified | Offset 2913, 16 lines modified | ||
| 2913 | ··············································································network·management | 2913 | ··············································································network·management |
| 2914 | ··············································································protocol·(SNMP) | 2914 | ··············································································protocol·(SNMP) |
| 2915 | ··············································································community·strings | 2915 | ··············································································community·strings |
| 2916 | ··············································································must·be·changed·to | 2916 | ··············································································must·be·changed·to |
| 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. | 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. |
| 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is | 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is |
| 2919 | ··································private.·This·profile·configures·new·read-··running·with·the | 2919 | ··································private.·This·profile·configures·new·read-··running·with·the |
| 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_r | 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_ro_string=changemero |
| 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_r | 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_rw_string=changemerw |
| 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can | 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can |
| 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about | 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about |
| 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the | 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the |
| 2925 | ··············································································network·and·use·the | 2925 | ··············································································network·and·use·the |
| 2926 | ··············································································information·to | 2926 | ··············································································information·to |
| 2927 | ··············································································potentially | 2927 | ··············································································potentially |
| 2928 | ··············································································compromise·the | 2928 | ··············································································compromise·the |
| Offset 8614, 19 lines modified | Offset 8614, 19 lines modified | ||
| 00021a50:·6f72·6b0a·616e·6420·7573·6520·7468·6520··ork.and·use·the· | 00021a50:·6f72·6b0a·616e·6420·7573·6520·7468·6520··ork.and·use·the· | ||
| 00021a60:·696e·666f·726d·6174·696f·6e20·746f·2070··information·to·p | 00021a60:·696e·666f·726d·6174·696f·6e20·746f·2070··information·to·p | ||
| 00021a70:·6f74·656e·7469·616c·6c79·2063·6f6d·7072··otentially·compr | 00021a70:·6f74·656e·7469·616c·6c79·2063·6f6d·7072··otentially·compr | ||
| 00021a80:·6f6d·6973·6520·7468·6520·696e·7465·6772··omise·the·integr | 00021a80:·6f6d·6973·6520·7468·6520·696e·7465·6772··omise·the·integr | ||
| 00021a90:·6974·7920·6f66·2074·6865·2073·7973·7465··ity·of·the·syste | 00021a90:·6974·7920·6f66·2074·6865·2073·7973·7465··ity·of·the·syste | ||
| 00021aa0:·6d20·616e·640a·6e65·7477·6f72·6b28·7329··m·and.network(s) | 00021aa0:·6d20·616e·640a·6e65·7477·6f72·6b28·7329··m·and.network(s) | ||
| 00021ab0:·2e0a·2020·3c2f·7464·3e0a·2020·3c74·643e··..··</td>.··<td> | 00021ab0:·2e0a·2020·3c2f·7464·3e0a·2020·3c74·643e··..··</td>.··<td> | ||
| 00021ac0:·7661·725f·736e·6d70·645f·72 | 00021ac0:·7661·725f·736e·6d70·645f·726f·5f73·7472··var_snmpd_ro_str | ||
| 00021ad0:·696e·673d·6368·616e·6765·6d65·72 | 00021ad0:·696e·673d·6368·616e·6765·6d65·726f·3c62··ing=changemero<b | ||
| 00021ae0:·722f·3e76·6172·5f73·6e6d·7064·5f72· | 00021ae0:·722f·3e76·6172·5f73·6e6d·7064·5f72·775f··r/>var_snmpd_rw_ | ||
| 00021af0:·7374·7269·6e67·3d63·6861·6e67·656d·6572··string=changemer | 00021af0:·7374·7269·6e67·3d63·6861·6e67·656d·6572··string=changemer | ||
| 00021b00:· | 00021b00:·773c·2f74·643e·0a3c·2f74·723e·0a3c·7472··w</td>.</tr>.<tr | ||
| 00021b10:·3e0a·2020·3c74·643e·5343·2d35·3c2f·7464··>.··<td>SC-5</td | 00021b10:·3e0a·2020·3c74·643e·5343·2d35·3c2f·7464··>.··<td>SC-5</td | ||
| 00021b20:·3e0a·2020·3c74·643e·4e2f·413c·2f74·643e··>.··<td>N/A</td> | 00021b20:·3e0a·2020·3c74·643e·4e2f·413c·2f74·643e··>.··<td>N/A</td> | ||
| 00021b30:·0a20·203c·7464·3e43·6f6e·6669·6775·7265··.··<td>Configure | 00021b30:·0a20·203c·7464·3e43·6f6e·6669·6775·7265··.··<td>Configure | ||
| 00021b40:·204b·6572·6e65·6c20·746f·2052·6174·6520···Kernel·to·Rate· | 00021b40:·204b·6572·6e65·6c20·746f·2052·6174·6520···Kernel·to·Rate· | ||
| 00021b50:·4c69·6d69·7420·5365·6e64·696e·6720·6f66··Limit·Sending·of | 00021b50:·4c69·6d69·7420·5365·6e64·696e·6720·6f66··Limit·Sending·of | ||
| 00021b60:·2044·7570·6c69·6361·7465·2054·4350·2041···Duplicate·TCP·A | 00021b60:·2044·7570·6c69·6361·7465·2054·4350·2041···Duplicate·TCP·A | ||
| 00021b70:·636b·6e6f·776c·6564·676d·656e·7473·3c2f··cknowledgments</ | 00021b70:·636b·6e6f·776c·6564·676d·656e·7473·3c2f··cknowledgments</ |
| Offset 2913, 16 lines modified | Offset 2913, 16 lines modified | ||
| 2913 | ··············································································network·management | 2913 | ··············································································network·management |
| 2914 | ··············································································protocol·(SNMP) | 2914 | ··············································································protocol·(SNMP) |
| 2915 | ··············································································community·strings | 2915 | ··············································································community·strings |
| 2916 | ··············································································must·be·changed·to | 2916 | ··············································································must·be·changed·to |
| 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. | 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. |
| 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is | 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is |
| 2919 | ··································private.·This·profile·configures·new·read-··running·with·the | 2919 | ··································private.·This·profile·configures·new·read-··running·with·the |
| 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_r | 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_ro_string=changemero |
| 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_r | 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_rw_string=changemerw |
| 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can | 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can |
| 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about | 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about |
| 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the | 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the |
| 2925 | ··············································································network·and·use·the | 2925 | ··············································································network·and·use·the |
| 2926 | ··············································································information·to | 2926 | ··············································································information·to |
| 2927 | ··············································································potentially | 2927 | ··············································································potentially |
| 2928 | ··············································································compromise·the | 2928 | ··············································································compromise·the |
| Offset 66, 14209 lines modified | Offset 66, 14209 lines modified | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | ||
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | ||
| 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | Diff chunk too large, falling back to line-by-line diff (5381 lines added, 5381 lines removed) | |
| 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | ||
| 00000480:·2020·2020·2020·3c74·643e· | 00000480:·2020·2020·2020·3c74·643e·5265·636f·7264········<td>Record | ||
| 00000490:·20 | 00000490:·2041·7474·656d·7074·7320·746f·2041·6c74···Attempts·to·Alt | ||
| 000004a0:· | 000004a0:·6572·2054·696d·6520·5468·726f·7567·6820··er·Time·Through· | ||
| 000004b0:·746 | 000004b0:·7374·696d·653c·2f74·643e·0a20·2020·2020··stime</td>.····· | ||
| 000004c0:· | 000004c0:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | ||
| 000004d0:· | 000004d0:·6e2d·5553·223e·0a20·2020·2020·2020·2049··n-US">.········I | ||
| 000004e0:· | 000004e0:·6620·7468·6520·3c74·743e·6175·6469·7464··f·the·<tt>auditd | ||
| 000004f0:· | 000004f0:·3c2f·7474·3e20·6461·656d·6f6e·2069·7320··</tt>·daemon·is· | ||
| 00000500:· | 00000500:·636f·6e66·6967·7572·6564·2074·6f20·7573··configured·to·us | ||
| 00000510:· | 00000510:·6520·7468·650a·3c74·743e·6175·6765·6e72··e·the.<tt>augenr | ||
| 00000520:· | 00000520:·756c·6573·3c2f·7474·3e20·7072·6f67·7261··ules</tt>·progra | ||
| 00000530:· | 00000530:·6d20·746f·2072·6561·6420·6175·6469·7420··m·to·read·audit· | ||
| 00000540:· | 00000540:·7275·6c65·7320·6475·7269·6e67·2064·6165··rules·during·dae | ||
| 00000550:· | 00000550:·6d6f·6e20·7374·6172·7475·7020·2874·6865··mon·startup·(the | ||
| 00000560:· | 00000560:·0a64·6566·6175·6c74·292c·2061·6464·2074··.default),·add·t | ||
| 00000570:· | 00000570:·6865·2066·6f6c·6c6f·7769·6e67·206c·696e··he·following·lin | ||
| 00000580:· | 00000580:·6520·746f·2061·2066·696c·6520·7769·7468··e·to·a·file·with | ||
| 00000590:· | 00000590:·2073·7566·6669·7820·3c74·743e·2e72·756c···suffix·<tt>.rul | ||
| 000005a0:· | 000005a0:·6573·3c2f·7474·3e20·696e·2074·6865·0a64··es</tt>·in·the.d | ||
| 000005b0:· | 000005b0:·6972·6563·746f·7279·203c·7474·3e2f·6574··irectory·<tt>/et | ||
| 000005c0:· | 000005c0:·632f·6175·6469·742f·7275·6c65·732e·643c··c/audit/rules.d< | ||
| 000005d0:·2 | 000005d0:·2f74·743e·2066·6f72·2062·6f74·6820·3332··/tt>·for·both·32 | ||
| 000005e0:· | 000005e0:·2062·6974·2061·6e64·2036·3420·6269·7420···bit·and·64·bit· | ||
| 000005f0:·7 | 000005f0:·7379·7374·656d·733a·0a3c·7072·653e·2d61··systems:.<pre>-a | ||
| 00000600:·206 | 00000600:·2061·6c77·6179·732c·6578·6974·202d·4620···always,exit·-F· | ||
| 00000610:·672 | 00000610:·6172·6368·3d62·3332·202d·5320·7374·696d··arch=b32·-S·stim | ||
| 00000620:· | 00000620:·6520·2d46·206b·6579·3d61·7564·6974·5f74··e·-F·key=audit_t | ||
| 00000630:· | 00000630:·696d·655f·7275·6c65·733c·2f70·7265·3e0a··ime_rules</pre>. | ||
| 00000640:· | 00000640:·5369·6e63·6520·7468·6520·3634·2062·6974··Since·the·64·bit | ||
| 00000650:· | 00000650:·2076·6572·7369·6f6e·206f·6620·7468·6520···version·of·the· | ||
| 00000660:· | 00000660:·2273·7469·6d65·2220·7379·7374·656d·2063··"stime"·system·c | ||
| 00000670:· | 00000670:·616c·6c20·6973·206e·6f74·2064·6566·696e··all·is·not·defin | ||
| 00000680:· | 00000680:·6564·2069·6e20·7468·6520·6175·6469·740a··ed·in·the·audit. | ||
| 00000690:· | 00000690:·6c6f·6f6b·7570·2074·6162·6c65·2c20·7468··lookup·table,·th | ||
| 000006a0:· | 000006a0:·6520·636f·7272·6573·706f·6e64·696e·6720··e·corresponding· | ||
| 000006b0:·2d46 | 000006b0:·222d·4620·6172·6368·3d62·3634·2220·666f··"-F·arch=b64"·fo | ||
| 000006c0:· | 000006c0:·726d·206f·6620·7468·6973·2072·756c·6520··rm·of·this·rule· | ||
| 000006d0:·3 | 000006d0:·6973·206e·6f74·2065·7870·6563·7465·640a··is·not·expected. | ||
| 000006e0:·74 | 000006e0:·746f·2062·6520·6465·6669·6e65·6420·6f6e··to·be·defined·on | ||
| 000006f0:· | 000006f0:·2036·3420·6269·7420·7379·7374·656d·7320···64·bit·systems· | ||
| 00000700:· | 00000700:·2874·6865·2061·666f·7265·6d65·6e74·696f··(the·aforementio | ||
| 00000710:· | 00000710:·6e65·6420·222d·4620·6172·6368·3d62·3332··ned·"-F·arch=b32 | ||
| 00000720:· | 00000720:·2220·7374·696d·6520·7275·6c65·0a66·6f72··"·stime·rule.for | ||
| 00000730:·6 | 00000730:·6d20·6974·7365·6c66·2069·7320·7375·6666··m·itself·is·suff | ||
| 00000740:·6 | 00000740:·6963·6965·6e74·2066·6f72·2062·6f74·6820··icient·for·both· | ||
| 00000750:· | 00000750:·3332·2062·6974·2061·6e64·2036·3420·6269··32·bit·and·64·bi | ||
| 00000760:· | 00000760:·7420·7379·7374·656d·7329·2e20·4966·2074··t·systems).·If·t | ||
| 00000770:·6 | 00000770:·6865·0a3c·7474·3e61·7564·6974·643c·2f74··he.<tt>auditd</t | ||
| 00000780:· | 00000780:·743e·2064·6165·6d6f·6e20·6973·2063·6f6e··t>·daemon·is·con | ||
| 00000790:· | 00000790:·6669·6775·7265·6420·746f·2075·7365·2074··figured·to·use·t | ||
| 000007a0:·6 | 000007a0:·6865·203c·7474·3e61·7564·6974·6374·6c3c··he·<tt>auditctl< | ||
| 000007b0:· | 000007b0:·2f74·743e·2075·7469·6c69·7479·2074·6f0a··/tt>·utility·to. | ||
| 000007c0:· | 000007c0:·7265·6164·2061·7564·6974·2072·756c·6573··read·audit·rules | ||
| 000007d0:·75 | 000007d0:·2064·7572·696e·6720·6461·656d·6f6e·2073···during·daemon·s | ||
| 000007e0:· | 000007e0:·7461·7274·7570·2c20·6164·6420·7468·6520··tartup,·add·the· | ||
| 000007f0:·6 | 000007f0:·666f·6c6c·6f77·696e·6720·6c69·6e65·2074··following·line·t | ||
| 00000800:· | 00000800:·6f0a·3c74·743e·2f65·7463·2f61·7564·6974··o.<tt>/etc/audit | ||
| 00000810:·2 | 00000810:·2f61·7564·6974·2e72·756c·6573·3c2f·7474··/audit.rules</tt | ||
| 00000820:· | 00000820:·3e20·6669·6c65·2066·6f72·2062·6f74·6820··>·file·for·both· | ||
| 00000830:· | 00000830:·3332·2062·6974·2061·6e64·2036·3420·6269··32·bit·and·64·bi | ||
| 00000840:· | 00000840:·7420·7379·7374·656d·733a·0a3c·7072·653e··t·systems:.<pre> | ||
| 00000850:·6 | 00000850:·2d61·2061·6c77·6179·732c·6578·6974·202d··-a·always,exit·- | ||
| 00000860:· | 00000860:·4620·6172·6368·3d62·3332·202d·5320·7374··F·arch=b32·-S·st | ||
| 00000870:· | 00000870:·696d·6520·2d46·206b·6579·3d61·7564·6974··ime·-F·key=audit | ||
| 00000880:· | 00000880:·5f74·696d·655f·7275·6c65·733c·2f70·7265··_time_rules</pre | ||
| 00000890:· | 00000890:·3e0a·5369·6e63·6520·7468·6520·3634·2062··>.Since·the·64·b | ||
| 000008a0:· | 000008a0:·6974·2076·6572·7369·6f6e·206f·6620·7468··it·version·of·th | ||
| 000008b0:·6 | 000008b0:·6520·2273·7469·6d65·2220·7379·7374·656d··e·"stime"·system | ||
| 000008c0:· | 000008c0:·2063·616c·6c20·6973·206e·6f74·2064·6566···call·is·not·def | ||
| 000008d0:·6 | 000008d0:·696e·6564·2069·6e20·7468·6520·6175·6469··ined·in·the·audi | ||
| 000008e0:· | 000008e0:·740a·6c6f·6f6b·7570·2074·6162·6c65·2c20··t.lookup·table,· | ||
| 000008f0:· | 000008f0:·7468·6520·636f·7272·6573·706f·6e64·696e··the·correspondin | ||
| 00000900:·6 | 00000900:·6720·222d·4620·6172·6368·3d62·3634·2220··g·"-F·arch=b64"· | ||
| 00000910:·666 | 00000910:·666f·726d·206f·6620·7468·6973·2072·756c··form·of·this·rul | ||
| 00000920:·6 | 00000920:·6520·6973·206e·6f74·2065·7870·6563·7465··e·is·not·expecte | ||
| 00000930:· | 00000930:·640a·746f·2062·6520·6465·6669·6e65·6420··d.to·be·defined· | ||
| 00000940:·6 | 00000940:·6f6e·2036·3420·6269·7420·7379·7374·656d··on·64·bit·system | ||
| 00000950:·7 | 00000950:·7320·2874·6865·2061·666f·7265·6d65·6e74··s·(the·aforement | ||
| 00000960:· | 00000960:·696f·6e65·6420·222d·4620·6172·6368·3d62··ioned·"-F·arch=b | ||
| 00000970:· | 00000970:·3332·2220·7374·696d·6520·7275·6c65·0a66··32"·stime·rule.f | ||
| 00000980:· | 00000980:·6f72·6d20·6974·7365·6c66·2069·7320·7375··orm·itself·is·su | ||
| 00000990:· | 00000990:·6666·6963·6965·6e74·2066·6f72·2062·6f74··fficient·for·bot | ||
| 000009a0:· | 000009a0:·6820·3332·2062·6974·2061·6e64·2036·3420··h·32·bit·and·64· | ||
| 000009b0:·6 | 000009b0:·6269·7420·7379·7374·656d·7329·2e20·5468··bit·systems).·Th | ||
| 000009c0:· | 000009c0:·6520·2d6b·206f·7074·696f·6e0a·616c·6c6f··e·-k·option.allo | ||
| 000009d0:· | 000009d0:·7773·2066·6f72·2074·6865·2073·7065·6369··ws·for·the·speci | ||
| 000009e0:· | 000009e0:·6669·6361·7469·6f6e·206f·6620·6120·6b65··fication·of·a·ke | ||
| 000009f0:· | 000009f0:·7920·696e·2073·7472·696e·6720·666f·726d··y·in·string·form | ||
| 00000a00:· | 00000a00:·2074·6861·7420·6361·6e20·6265·2075·7365···that·can·be·use | ||
| 00000a10:· | 00000a10:·6420·666f·720a·6265·7474·6572·2072·6570··d·for.better·rep | ||
| 00000a20:· | 00000a20:·6f72·7469·6e67·2063·6170·6162·696c·6974··orting·capabilit | ||
| 00000a30:·2074 | 00000a30:·7920·7468·726f·7567·6820·6175·7365·6172··y·through·ausear | ||
| 00000a40:·6 | 00000a40:·6368·2061·6e64·2061·7572·6570·6f72·742e··ch·and·aureport. | ||
| 00000a50:· | 00000a50:·204d·756c·7469·706c·6520·7379·7374·656d···Multiple·system | ||
| 00000a60:· | 00000a60:·0a63·616c·6c73·2063·616e·2062·6520·6465··.calls·can·be·de | ||
| 00000a70:·6 | 00000a70:·6669·6e65·6420·6f6e·2074·6865·2073·616d··fined·on·the·sam | ||
| 00000a80:·6 | 00000a80:·6520·6c69·6e65·2074·6f20·7361·7665·2073··e·line·to·save·s | ||
| 00000a90:·7 | 00000a90:·7061·6365·2069·6620·6465·7369·7265·642c··pace·if·desired, | ||
| 00000aa0:· | 00000aa0:·2062·7574·2069·7320·6e6f·740a·7265·7175···but·is·not.requ | ||
| 00000ab0:·756 | 00000ab0:·6972·6564·2e20·5365·6520·616e·2065·7861··ired.·See·an·exa | ||
| 00000ac0:· | 00000ac0:·6d70·6c65·206f·6620·6d75·6c74·6970·6c65··mple·of·multiple | ||
| 00000ad0:·20 | 00000ad0:·2063·6f6d·6269·6e65·6420·7379·7374·656d···combined·system | ||
| 00000ae0:· | 00000ae0:·2063·616c·6c73·3a0a·3c70·7265·3e2d·6120···calls:.<pre>-a· | ||
| 00000af0:·6 | 00000af0:·616c·7761·7973·2c65·7869·7420·2d46·2061··always,exit·-F·a | ||
| 00000b00:· | 00000b00:·7263·683d·6236·3420·2d53·2061·646a·7469··rch=b64·-S·adjti | ||
| 00000b10:· | 00000b10:·6d65·782c·7365·7474·696d·656f·6664·6179··mex,settimeofday | ||
| 00000b20:· | 00000b20:·202d·4620·6b65·793d·6175·6469·745f·7469···-F·key=audit_ti | ||
| 00000b30:·6 | 00000b30:·6d65·5f72·756c·6573·3c2f·7072·653e·0a20··me_rules</pre>.· | ||
| 00000b40:· | 00000b40:·2020·2020·203c·2f74·643e·0a20·2020·2020·······</td>.····· | ||
| 00000b50:· | 00000b50:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | ||
| 00000b60:·6 | 00000b60:·6e2d·5553·223e·0a20·2020·2020·2020·2041··n-US">.········A | ||
| 00000b70:· | 00000b70:·7262·6974·7261·7279·2063·6861·6e67·6573··rbitrary·changes | ||
| 00000b80:·206 | 00000b80:·2074·6f20·7468·6520·7379·7374·656d·2074···to·the·system·t | ||
| 00000b90:·6 | 00000b90:·696d·6520·6361·6e20·6265·2075·7365·6420··ime·can·be·used· | ||
| 00000ba0:·7 | 00000ba0:·746f·206f·6266·7573·6361·7465·0a6e·6566··to·obfuscate.nef | ||
| 00000bb0:·6 | 00000bb0:·6172·696f·7573·2061·6374·6976·6974·6965··arious·activitie | ||
| 00000bc0:· | 00000bc0:·7320·696e·206c·6f67·2066·696c·6573·2c20··s·in·log·files,· | ||
| 00000bd0:·6 | 00000bd0:·6173·2077·656c·6c20·6173·2074·6f20·636f··as·well·as·to·co | ||
| 00000be0:· | 00000be0:·6e66·7573·6520·6e65·7477·6f72·6b20·7365··nfuse·network·se | ||
| Max diff block lines reached; 6480004/7223160 bytes (89.71%) of diff not shown. | |||
| Offset 75, 79 lines modified | Offset 75, 31 lines modified | ||
| 75 | package,·or·the·SCAP·Workbench·GUI·tool·from·the·<tt>scap-workbench</tt>·package,·to·verify | 75 | package,·or·the·SCAP·Workbench·GUI·tool·from·the·<tt>scap-workbench</tt>·package,·to·verify |
| 76 | that·the·system·conforms·to·provided·guidelines.·Refer·to·the·scap-security-guide(8)·manual | 76 | that·the·system·conforms·to·provided·guidelines.·Refer·to·the·scap-security-guide(8)·manual |
| 77 | page·for·futher·information. | 77 | page·for·futher·information. |
| 78 | ······</td> | 78 | ······</td> |
| 79 | ····</tr> | 79 | ····</tr> |
| 80 | ····<tr> | 80 | ····<tr> |
| 81 | ······<td>FAU_GEN.1</td> | 81 | ······<td>FAU_GEN.1</td> |
| 82 | ······<td>Disable·SSH·Root·Login</td> | ||
| 82 | ······<td>Enable·Auditing·to·Start·Prior·to·the·Audit·Daemon·in·zIPL</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit·daemon, | ||
| 85 | check·that·all·boot·entries·in·<tt>/boot/loader/entries/*.conf</tt>·have·<tt>audit=1</tt> | ||
| 86 | included·in·its·options.<br·/> | ||
| 87 | To·ensure·that·new·kernels·and·boot·entries·continue·to·enable·audit, | ||
| 88 | add·<tt>audit=1</tt>·to·<tt>/etc/kernel/cmdline</tt>. | ||
| 89 | ······</td> | ||
| 90 | ······<td·xml:lang="en-US"> | ||
| 91 | ········Each·process·on·the·system·carries·an·"auditable"·flag·which·indicates·whether | ||
| 92 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling | ||
| 93 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument | ||
| 94 | ensures·it·is·set·for·every·process·during·boot. | ||
| 95 | ······</td> | ||
| 96 | ····</tr> | ||
| 97 | ····<tr> | ||
| 98 | ······<td>FAU_GEN.1</td> | ||
| 99 | ······<td>Include·Local·Events·in·Audit·Logs</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·configure·Audit·daemon·to·include·local·events·in·Audit·logs,·set | ||
| 102 | <tt>local_events</tt>·to·<tt>yes</tt>·in·<tt>/etc/audit/auditd.conf</tt>. | ||
| 103 | This·is·the·default·setting. | ||
| 104 | ······</td> | ||
| 105 | ······<td·xml:lang="en-US"> | ||
| 106 | ········If·option·<tt>local_events</tt>·isn't·set·to·<tt>yes</tt>·only·events·from | ||
| 107 | network·will·be·aggregated. | ||
| 108 | ······</td> | ||
| 109 | ····</tr> | ||
| 110 | ····<tr> | ||
| 111 | ······<td>FAU_GEN.1</td> | ||
| 112 | ······<td>Ensure·the·audit-libs·package·as·a·part·of·audit·Subsystem·is·Installed</td> | ||
| 113 | ······<td·xml:lang="en-US"> | ||
| 114 | ········The·audit-libs·package·should·be·installed. | ||
| 115 | ······</td> | ||
| 116 | ······<td·xml:lang="en-US"> | ||
| 117 | ········The·auditd·service·is·an·access·monitoring·and·accounting·daemon,·watching·system·calls·to·audit·any·access,·in·comparison·with·potential·local·access·control·policy·such·as·SELinux·policy. | ||
| 118 | ······</td> | ||
| 119 | ····</tr> | ||
| 120 | ····<tr> | ||
| 121 | ······<td>FAU_GEN.1</td> | ||
| 122 | ······<td>Configure·basic·parameters·of·Audit·system</td> | ||
| 123 | ······<td·xml:lang="en-US"> | 83 | ······<td·xml:lang="en-US"> |
| 84 | ········The·root·user·should·never·be·allowed·to·login·to·a | ||
| 85 | system·directly·over·a·network. | ||
| 86 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 124 | ········Perform·basic·configuration·of·Audit·system. | ||
| 125 | Make·sure·that·any·previously·defined·rules·are·cleared,·the·auditing·system·is·configured·to·handle·sudden·bursts·of·events,·and·in·cases·of·failure,·messages·are·configured·to·be·directed·to·system·log. | ||
| 126 | The·following·rules·configure·audit·as·described·above: | ||
| 127 | <pre>##·First·rule·-·delete·all | ||
| 128 | -D | ||
| 129 | ##·Increase·the·buffers·to·survive·stress·events. | ||
| 130 | ##·Make·this·bigger·for·busy·systems | ||
| 131 | -b·8192 | ||
| 132 | ##·This·determine·how·long·to·wait·in·burst·of·events | ||
| 133 | --backlog_wait_time·60000 | ||
| 87 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 134 | ##·Set·failure·mode·to·syslog | ||
| 135 | -f·1····</pre> | ||
| 88 | <pre>PermitRootLogin·no</pre> | ||
| 136 | Load·new·Audit·rules·into·kernel·by·running: | ||
| 137 | <pre>augenrules·--load</pre> | ||
| 138 | ······</td> | 89 | ······</td> |
| 139 | ······<td·xml:lang="en-US"> | 90 | ······<td·xml:lang="en-US"> |
| 140 | ········ | 91 | ········Even·though·the·communications·channel·may·be·encrypted,·an·additional·layer·of |
| 92 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | ||
| 93 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | ||
| 94 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | ||
| 95 | direct·attack·attempts·on·root's·password. | ||
| 141 | ······</td> | 96 | ······</td> |
| 142 | ····</tr> | 97 | ····</tr> |
| 143 | ····<tr> | 98 | ····<tr> |
| 144 | ······<td>FAU_GEN.1</td> | 99 | ······<td>FAU_GEN.1</td> |
| 145 | ······<td>Enable·auditd·Service</td> | 100 | ······<td>Enable·auditd·Service</td> |
| 146 | ······<td·xml:lang="en-US"> | 101 | ······<td·xml:lang="en-US"> |
| 147 | ········The·<tt>auditd</tt>·service·is·an·essential·userspace·component·of | 102 | ········The·<tt>auditd</tt>·service·is·an·essential·userspace·component·of |
| Offset 166, 31 lines modified | Offset 118, 23 lines modified | ||
| 166 | Additionally,·a·properly·configured·audit·subsystem·ensures·that·actions·of | 118 | Additionally,·a·properly·configured·audit·subsystem·ensures·that·actions·of |
| 167 | individual·system·users·can·be·uniquely·traced·to·those·users·so·they | 119 | individual·system·users·can·be·uniquely·traced·to·those·users·so·they |
| 168 | can·be·held·accountable·for·their·actions. | 120 | can·be·held·accountable·for·their·actions. |
| 169 | ······</td> | 121 | ······</td> |
| 170 | ····</tr> | 122 | ····</tr> |
| 171 | ····<tr> | 123 | ····<tr> |
| 172 | ······<td>FAU_GEN.1</td> | 124 | ······<td>FAU_GEN.1</td> |
| 173 | ······<td> | 125 | ······<td>Include·Local·Events·in·Audit·Logs</td> |
| 174 | ······<td·xml:lang="en-US"> | 126 | ······<td·xml:lang="en-US"> |
| 127 | ········To·configure·Audit·daemon·to·include·local·events·in·Audit·logs,·set | ||
| 128 | <tt>local_events</tt>·to·<tt>yes</tt>·in·<tt>/etc/audit/auditd.conf</tt>. | ||
| 129 | This·is·the·default·setting. | ||
| 175 | ········The·root·user·should·never·be·allowed·to·login·to·a | ||
| 176 | system·directly·over·a·network. | ||
| 177 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 178 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 179 | <pre>PermitRootLogin·no</pre> | ||
| 180 | ······</td> | 130 | ······</td> |
| 181 | ······<td·xml:lang="en-US"> | 131 | ······<td·xml:lang="en-US"> |
| 132 | ········If·option·<tt>local_events</tt>·isn't·set·to·<tt>yes</tt>·only·events·from | ||
| 133 | network·will·be·aggregated. | ||
| 182 | ········Even·though·the·communications·channel·may·be·encrypted,·an·additional·layer·of | ||
| 183 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | ||
| 184 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | ||
| 185 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | ||
| 186 | direct·attack·attempts·on·root's·password. | ||
| 187 | ······</td> | 134 | ······</td> |
| 188 | ····</tr> | 135 | ····</tr> |
| 189 | ····<tr> | 136 | ····<tr> |
| 190 | ······<td>FAU_GEN.1</td> | 137 | ······<td>FAU_GEN.1</td> |
| 191 | ······<td>Enable·Auditing·for·Processes·Which·Start·Prior·to·the·Audit·Daemon</td> | 138 | ······<td>Enable·Auditing·for·Processes·Which·Start·Prior·to·the·Audit·Daemon</td> |
| 192 | ······<td·xml:lang="en-US"> | 139 | ······<td·xml:lang="en-US"> |
| 193 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start | 140 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start |
| Offset 208, 123 lines modified | Offset 152, 143 lines modified | ||
| Max diff block lines reached; 510120/515627 bytes (98.93%) of diff not shown. | |||
| Offset 43, 59 lines modified | Offset 43, 31 lines modified | ||
| 43 | ·····························································································································package,·to·verify·that | 43 | ·····························································································································package,·to·verify·that |
| 44 | ·····························································································································the·system·conforms·to | 44 | ·····························································································································the·system·conforms·to |
| 45 | ·····························································································································provided·guidelines. | 45 | ·····························································································································provided·guidelines. |
| 46 | ·····························································································································Refer·to·the·scap- | 46 | ·····························································································································Refer·to·the·scap- |
| 47 | ·····························································································································security-guide(8) | 47 | ·····························································································································security-guide(8) |
| 48 | ·····························································································································manual·page·for·futher | 48 | ·····························································································································manual·page·for·futher |
| 49 | ·····························································································································information. | 49 | ·····························································································································information. |
| 50 | ·····························································································································Each·process·on·the | ||
| 51 | ·····························································································································system·carries·an | ||
| 52 | ·····························································································································"auditable"·flag·which | ||
| 53 | ·····························································································································indicates·whether·its | ||
| 54 | ····································To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit········activities·can·be | ||
| 55 | ··················Enable·Auditing···daemon,·check·that·all·boot·entries·in·/boot/loader/entries/*.conf·have·audit=1·included·audited.·Although | ||
| 56 | FAU_GEN.1·········to·Start·Prior·to·in·its·options.··········································································auditd·takes·care·of | ||
| 57 | ··················the·Audit·Daemon··To·ensure·that·new·kernels·and·boot·entries·continue·to·enable·audit,·add·audit=1·to·/···enabling·this·for·all | ||
| 58 | ··················in·zIPL···········etc/kernel/cmdline.······································································processes·which·launch | ||
| 59 | ·····························································································································after·it·does,·adding | ||
| 60 | ·····························································································································the·kernel·argument | ||
| 61 | ·····························································································································ensures·it·is·set·for | ||
| 62 | ·····························································································································every·process·during | ||
| 63 | ····························································································································· | 50 | ·····························································································································Even·though·the |
| 51 | ·····························································································································communications·channel | ||
| 64 | ··················Include·Local······························································································If·option·local_events | ||
| 65 | FAU_GEN.1·········Events·in·Audit···To·configure·Audit·daemon·to·include·local·events·in·Audit·logs,·set·local_events·to·yes·isn't·set·to·yes·only | ||
| 66 | ··················Logs··············in·/etc/audit/auditd.conf.·This·is·the·default·setting.··································events·from·network | ||
| 67 | ····························································································································· | 52 | ·····························································································································may·be·encrypted,·an |
| 68 | ····························································································································· | 53 | ·····························································································································additional·layer·of |
| 69 | ·····························································································································an·access·monitoring | ||
| 70 | ··················Ensure·the·audit-··························································································and·accounting·daemon, | ||
| 71 | ··················libs·package·as·a··························································································watching·system·calls | ||
| 72 | FAU_GEN.1·········part·of·audit·····The·audit-libs·package·should·be·installed.··············································to·audit·any·access,·in | ||
| 73 | ··················Subsystem·is·······························································································comparison·with | ||
| 74 | ··················Installed··································································································potential·local·access | ||
| 75 | ····························································································································· | 54 | ·····························································································································security·is·gained·by |
| 76 | ····························································································································· | 55 | ·····························································································································extending·the·policy·of |
| 56 | ·····························································································································not·logging·directly·on | ||
| 57 | ··················Disable·SSH·Root··The·root·user·should·never·be·allowed·to·login·to·a·system·directly·over·a·network.·To···as·root.·In·addition, | ||
| 58 | FAU_GEN.1·········Login·············disable·root·login·via·SSH,·add·or·correct·the·following·line·in·/etc/ssh/sshd_config:···logging·in·with·a·user- | ||
| 77 | ····································Perform·basic·configuration·of·Audit·system.·Make·sure·that·any·previously·defined·rules | ||
| 78 | ····································are·cleared,·the·auditing·system·is·configured·to·handle·sudden·bursts·of·events,·and·in | ||
| 79 | ····································cases·of·failure,·messages·are·configured·to·be·directed·to·system·log.·The·following | ||
| 80 | ····································rules·configure·audit·as·described·above: | ||
| 81 | ····································##·First·rule·-·delete·all·······························································Without·basic | ||
| 82 | ···································· | 59 | ····································PermitRootLogin·no·······································································specific·account |
| 60 | ·····························································································································provides·individual | ||
| 61 | ·····························································································································accountability·of | ||
| 83 | ····························································································································· | 62 | ·····························································································································actions·performed·on |
| 84 | ··················Configure·basic···##·Increase·the·buffers·to·survive·stress·events.········································expected.·It·may·not·be | ||
| 85 | FAU_GEN.1·········parameters·of·····##·Make·this·bigger·for·busy·systems·····················································able·to·correctly | ||
| 86 | ··················Audit·system······-b·8192··················································································handle·events·under | ||
| 87 | ····························································································································· | 63 | ·····························································································································the·system·and·also |
| 88 | ···································· | 64 | ·····························································································································helps·to·minimize |
| 65 | ·····························································································································direct·attack·attempts | ||
| 89 | ···································· | 66 | ·····························································································································on·root's·password. |
| 90 | ····································##·Set·failure·mode·to·syslog | ||
| 91 | ····································-f·1 | ||
| 92 | ····································Load·new·Audit·rules·into·kernel·by·running: | ||
| 93 | ····································augenrules·--load | ||
| 94 | ·····························································································································Without·establishing | 67 | ·····························································································································Without·establishing |
| 95 | ·····························································································································what·type·of·events | 68 | ·····························································································································what·type·of·events |
| 96 | ·····························································································································occurred,·it·would·be | 69 | ·····························································································································occurred,·it·would·be |
| 97 | ·····························································································································difficult·to·establish, | 70 | ·····························································································································difficult·to·establish, |
| 98 | ·····························································································································correlate,·and | 71 | ·····························································································································correlate,·and |
| 99 | ·····························································································································investigate·the·events | 72 | ·····························································································································investigate·the·events |
| 100 | ·····························································································································leading·up·to·an·outage | 73 | ·····························································································································leading·up·to·an·outage |
| Offset 112, 119 lines modified | Offset 84, 317 lines modified | ||
| 112 | ·····························································································································audit·subsystem·ensures | 84 | ·····························································································································audit·subsystem·ensures |
| 113 | ·····························································································································that·actions·of | 85 | ·····························································································································that·actions·of |
| 114 | ·····························································································································individual·system·users | 86 | ·····························································································································individual·system·users |
| 115 | ·····························································································································can·be·uniquely·traced | 87 | ·····························································································································can·be·uniquely·traced |
| 116 | ·····························································································································to·those·users·so·they | 88 | ·····························································································································to·those·users·so·they |
| 117 | ·····························································································································can·be·held·accountable | 89 | ·····························································································································can·be·held·accountable |
| 118 | ·····························································································································for·their·actions. | 90 | ·····························································································································for·their·actions. |
| 119 | ·····························································································································Even·though·the | ||
| 120 | ·················· | 91 | ··················Include·Local······························································································If·option·local_events |
| 92 | FAU_GEN.1·········Events·in·Audit···To·configure·Audit·daemon·to·include·local·events·in·Audit·logs,·set·local_events·to·yes·isn't·set·to·yes·only | ||
| 93 | ··················Logs··············in·/etc/audit/auditd.conf.·This·is·the·default·setting.··································events·from·network | ||
| 121 | ····························································································································· | 94 | ·····························································································································will·be·aggregated. |
| 122 | ·····························································································································additional·layer·of | ||
| 123 | ·····························································································································security·is·gained·by | ||
| 124 | ·····························································································································extending·the·policy·of | ||
| 125 | ·····························································································································not·logging·directly·on | ||
| 126 | ··················Disable·SSH·Root··The·root·user·should·never·be·allowed·to·login·to·a·system·directly·over·a·network.·To···as·root.·In·addition, | ||
| 127 | FAU_GEN.1·········Login·············disable·root·login·via·SSH,·add·or·correct·the·following·line·in·/etc/ssh/sshd_config:···logging·in·with·a·user- | ||
| 128 | ····································PermitRootLogin·no·······································································specific·account | ||
| 129 | ·····························································································································provides·individual | ||
| 130 | ·····························································································································accountability·of | ||
| 131 | ·····························································································································actions·performed·on | ||
| 132 | ·····························································································································the·system·and·also | ||
| 133 | ·····························································································································helps·to·minimize | ||
| 134 | ·····························································································································direct·attack·attempts | ||
| 135 | ·····························································································································on·root's·password. | ||
| 136 | ·····························································································································Each·process·on·the | 95 | ·····························································································································Each·process·on·the |
| 137 | ·····························································································································system·carries·an | 96 | ·····························································································································system·carries·an |
| 138 | ·····························································································································"auditable"·flag·which | 97 | ·····························································································································"auditable"·flag·which |
| 139 | ····································To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit········indicates·whether·its | 98 | ····································To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit········indicates·whether·its |
| 140 | ··················Enable·Auditing···daemon,·add·the·argument·audit=1·to·the·default·GRUB·2·command·line·for·the·Linux········activities·can·be | 99 | ··················Enable·Auditing···daemon,·add·the·argument·audit=1·to·the·default·GRUB·2·command·line·for·the·Linux········activities·can·be |
| 141 | ··················for·Processes·····operating·system.·To·ensure·that·audit=1·is·added·as·a·kernel·command·line·argument·to···audited.·Although | 100 | ··················for·Processes·····operating·system.·To·ensure·that·audit=1·is·added·as·a·kernel·command·line·argument·to···audited.·Although |
| 142 | FAU_GEN.1·········Which·Start·Prior·newly·installed·kernels,·add·audit=1·to·the·default·Grub2·command·line·for·Linux·········auditd·takes·care·of | 101 | FAU_GEN.1·········Which·Start·Prior·newly·installed·kernels,·add·audit=1·to·the·default·Grub2·command·line·for·Linux·········auditd·takes·care·of |
| 143 | ··················to·the·Audit······operating·systems.·Modify·the·line·within·/etc/default/grub·as·shown·below:··············enabling·this·for·all | 102 | ··················to·the·Audit······operating·systems.·Modify·the·line·within·/etc/default/grub·as·shown·below:··············enabling·this·for·all |
| 144 | ··················Daemon············GRUB_CMDLINE_LINUX="...·audit=1·..."·····················································processes·which·launch | 103 | ··················Daemon············GRUB_CMDLINE_LINUX="...·audit=1·..."·····················································processes·which·launch |
| 145 | ····································Run·the·following·command·to·update·command·line·for·already·installed·kernels:··········after·it·does,·adding | 104 | ····································Run·the·following·command·to·update·command·line·for·already·installed·kernels:··········after·it·does,·adding |
| 146 | ····································#·grubby·--update-kernel=ALL·--args="audit=1"············································the·kernel·argument | 105 | ····································#·grubby·--update-kernel=ALL·--args="audit=1"············································the·kernel·argument |
| 147 | ·····························································································································ensures·it·is·set·for | 106 | ·····························································································································ensures·it·is·set·for |
| 148 | ·····························································································································every·process·during | 107 | ·····························································································································every·process·during |
| 149 | ·····························································································································boot. | 108 | ·····························································································································boot. |
| 109 | ·····························································································································The·auditd·service·is | ||
| 110 | ·····························································································································an·access·monitoring | ||
| 111 | ·····························································································································and·accounting·daemon, | ||
| 112 | ··················Ensure·the·audit···························································································watching·system·calls | ||
| 113 | FAU_GEN.1·········Subsystem·is······The·audit·package·should·be·installed.···················································to·audit·any·access,·in | ||
| 114 | ··················Installed··································································································comparison·with | ||
| 115 | ·····························································································································potential·local·access | ||
| 116 | ·····························································································································control·policy·such·as | ||
| 117 | ·····························································································································SELinux·policy. | ||
| 150 | ·····························································································································If·option·freq·isn't | 118 | ·····························································································································If·option·freq·isn't |
| 151 | ··················Set·number·of······························································································set·to·,·the·flush·to | 119 | ··················Set·number·of······························································································set·to·,·the·flush·to |
| 152 | FAU_GEN.1·········records·to·cause··To·configure·Audit·daemon·to·issue·an·explicit·flush·to·disk·command·after·writing·50····disk·may·happen·after | 120 | FAU_GEN.1·········records·to·cause··To·configure·Audit·daemon·to·issue·an·explicit·flush·to·disk·command·after·writing·50····disk·may·happen·after |
| 153 | ··················an·explicit·flush·records,·set·freq·to·50·in·/etc/audit/auditd.conf.·······································higher·number·of | 121 | ··················an·explicit·flush·records,·set·freq·to·50·in·/etc/audit/auditd.conf.·······································higher·number·of |
| 154 | ··················to·audit·logs······························································································records,·increasing·the | 122 | ··················to·audit·logs······························································································records,·increasing·the |
| 155 | ·····························································································································danger·of·audit·loss. | 123 | ·····························································································································danger·of·audit·loss. |
| 124 | ·····························································································································Each·process·on·the | ||
| 125 | ·····························································································································system·carries·an | ||
| 126 | ·····························································································································"auditable"·flag·which | ||
| 127 | ·····························································································································indicates·whether·its | ||
| 128 | ····································To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit········activities·can·be | ||
| Max diff block lines reached; 910603/931712 bytes (97.73%) of diff not shown. | |||
| Offset 41, 60 lines modified | Offset 41, 46 lines modified | ||
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>Req-1.3</td> | 47 | ······<td>Req-1.3</td> |
| 48 | ······<td>Set·configuration·for· | 48 | ······<td>Set·configuration·for·loopback·traffic</td> |
| 49 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 50 | ········Configure·the·loopback·interface·to·accept·traffic. | 50 | ········Configure·the·loopback·interface·to·accept·traffic. |
| 51 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | 51 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback |
| 52 | network. | 52 | network. |
| 53 | ······</td> | 53 | ······</td> |
| 54 | ······<td·xml:lang="en-US"> | 54 | ······<td·xml:lang="en-US"> |
| 55 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | 55 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is |
| 56 | typically·critical·to·operation·of·the·system.·The·loopback·interface | 56 | typically·critical·to·operation·of·the·system.·The·loopback·interface |
| 57 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 57 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 58 | 58 | other·interfaces·should·ignore·traffic·on·this·network·as·an | |
| 59 | anti-spoofing·measure. | 59 | anti-spoofing·measure. |
| 60 | ······</td> | 60 | ······</td> |
| 61 | ····</tr> | 61 | ····</tr> |
| 62 | ····<tr> | 62 | ····<tr> |
| 63 | ······<td>Req-1.3</td> | 63 | ······<td>Req-1.3</td> |
| 64 | ······<td>Set·configuration·for·loopback·traffic</td> | 64 | ······<td>Set·configuration·for·IPv6·loopback·traffic</td> |
| 65 | ······<td·xml:lang="en-US"> | 65 | ······<td·xml:lang="en-US"> |
| 66 | ········Configure·the·loopback·interface·to·accept·traffic. | 66 | ········Configure·the·loopback·interface·to·accept·traffic. |
| 67 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | 67 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback |
| 68 | network. | 68 | network. |
| 69 | ······</td> | 69 | ······</td> |
| 70 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 71 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | 71 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is |
| 72 | typically·critical·to·operation·of·the·system.·The·loopback·interface | 72 | typically·critical·to·operation·of·the·system.·The·loopback·interface |
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen, |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 95 | ······<td·xml:lang="en-US"> | 81 | ······<td·xml:lang="en-US"> |
| 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 98 | GRUB2·command·line·for·the·Linux·operating·system. | 84 | GRUB2·command·line·for·the·Linux·operating·system. |
| 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 105, 14 lines modified | Offset 91, 28 lines modified | ||
| 105 | ······</td> | 91 | ······</td> |
| 106 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 108 | the·vulnerability·to·exploitation. | 94 | the·vulnerability·to·exploitation. |
| 109 | ······</td> | 95 | ······</td> |
| 110 | ····</tr> | 96 | ····</tr> |
| 111 | ····<tr> | 97 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 14 lines modified | Offset 157, 28 lines modified | ||
| 157 | ······<td·xml:lang="en-US"> | 157 | ······<td·xml:lang="en-US"> |
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all |
| 159 | packets·to·these·ports. | 159 | packets·to·these·ports. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td>Install·iptables·Package</td> | ||
| 165 | ······<td·xml:lang="en-US"> | ||
| 166 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 167 | <pre> | ||
| 168 | $·sudo·yum·install·iptables</pre> | ||
| 169 | ······</td> | ||
| 170 | ······<td·xml:lang="en-US"> | ||
| 171 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 172 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 173 | masquerading,·etc. | ||
| 174 | ······</td> | ||
| 175 | ····</tr> | ||
| 176 | ····<tr> | ||
| 177 | ······<td>Req-1.4.1</td> | ||
| 164 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 178 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 165 | ······<td·xml:lang="en-US"> | 179 | ······<td·xml:lang="en-US"> |
| 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 180 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| 167 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | 181 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> |
| 168 | ······</td> | 182 | ······</td> |
| 169 | ······<td·xml:lang="en-US"> | 183 | ······<td·xml:lang="en-US"> |
| 170 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | 184 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a |
| Offset 173, 28 lines modified | Offset 187, 14 lines modified | ||
| 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 187 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 188 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 175 | enables·the·system·to·continue·servicing·valid·connection·requests. | 189 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 176 | ······</td> | 190 | ······</td> |
| 177 | ····</tr> | 191 | ····</tr> |
| 178 | ····<tr> | 192 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 193 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Install·iptables·Package</td> | ||
| Max diff block lines reached; 305526/311907 bytes (97.95%) of diff not shown. | |||
| Offset 8, 15 lines modified | Offset 8, 15 lines modified | ||
| 8 | ····················································································generated·between | 8 | ····················································································generated·between |
| 9 | ····················································································processes·on | 9 | ····················································································processes·on |
| 10 | ····················································································machine·and·is | 10 | ····················································································machine·and·is |
| 11 | ····················································································typically·critical | 11 | ····················································································typically·critical |
| 12 | ····················································································to·operation·of·the | 12 | ····················································································to·operation·of·the |
| 13 | ····················································································system.·The | 13 | ····················································································system.·The |
| 14 | ·········Set·configuration···Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | 14 | ·········Set·configuration···Configure·the·loopback·interface·to·accept·traffic.····loopback·interface |
| 15 | Req-1.3··for· | 15 | Req-1.3··for·loopback········Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place |
| 16 | ·········traffic·············loopback·network.······································that·loopback | 16 | ·········traffic·············loopback·network.······································that·loopback |
| 17 | ····················································································network·traffic | 17 | ····················································································network·traffic |
| 18 | ····················································································should·be·seen,·all | 18 | ····················································································should·be·seen,·all |
| 19 | ····················································································other·interfaces | 19 | ····················································································other·interfaces |
| 20 | ····················································································should·ignore | 20 | ····················································································should·ignore |
| 21 | ····················································································traffic·on·this | 21 | ····················································································traffic·on·this |
| 22 | ····················································································network·as·an·anti- | 22 | ····················································································network·as·an·anti- |
| Offset 25, 23 lines modified | Offset 25, 35 lines modified | ||
| 25 | ····················································································generated·between | 25 | ····················································································generated·between |
| 26 | ····················································································processes·on | 26 | ····················································································processes·on |
| 27 | ····················································································machine·and·is | 27 | ····················································································machine·and·is |
| 28 | ····················································································typically·critical | 28 | ····················································································typically·critical |
| 29 | ····················································································to·operation·of·the | 29 | ····················································································to·operation·of·the |
| 30 | ····················································································system.·The | 30 | ····················································································system.·The |
| 31 | ·········Set·configuration···Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | 31 | ·········Set·configuration···Configure·the·loopback·interface·to·accept·traffic.····loopback·interface |
| 32 | Req-1.3··for·loopback | 32 | Req-1.3··for·IPv6·loopback···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place |
| 33 | ·········traffic·············loopback·network.······································that·loopback | 33 | ·········traffic·············loopback·network.······································that·loopback |
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 41 | ····················································································Routing·protocol | 53 | ····················································································Routing·protocol |
| 42 | ····················································································daemons·are | 54 | ····················································································daemons·are |
| 43 | ····················································································typically·used·on | 55 | ····················································································typically·used·on |
| 44 | ····················································································routers·to·exchange | 56 | ····················································································routers·to·exchange |
| 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 49, 26 lines modified | Offset 61, 14 lines modified | ||
| 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 50 | ·····························sysctl.d:··············································required,·system | 62 | ·····························sysctl.d:··············································required,·system |
| 51 | ·····························net.ipv4.ip_forward·=·0································network·information | 63 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 52 | ····················································································may·be | 64 | ····················································································may·be |
| 53 | ····················································································unnecessarily | 65 | ····················································································unnecessarily |
| 54 | ····················································································transmitted·across | 66 | ····················································································transmitted·across |
| 55 | ····················································································the·network. | 67 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 14 lines modified | Offset 112, 23 lines modified | ||
| 112 | ····················································································Without·a·firewall | 112 | ····················································································Without·a·firewall |
| 113 | ····················································································rule·configured·for | 113 | ····················································································rule·configured·for |
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default |
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy |
| 116 | ·········open·ports·································································will·drop·all | 116 | ·········open·ports·································································will·drop·all |
| 117 | ····················································································packets·to·these | 117 | ····················································································packets·to·these |
| 118 | ····················································································ports. | 118 | ····················································································ports. |
| 119 | ····················································································iptables·controls | ||
| 120 | ····················································································the·Linux·kernel | ||
| 121 | ····················································································network·packet | ||
| 122 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 123 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 124 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 125 | ····················································································set·up·firewalls | ||
| 126 | ····················································································and·IP | ||
| 127 | ····················································································masquerading,·etc. | ||
| 119 | ····················································································A·TCP·SYN·flood | 128 | ····················································································A·TCP·SYN·flood |
| 120 | ····················································································attack·can·cause·a | 129 | ····················································································attack·can·cause·a |
| 121 | ····················································································denial·of·service | 130 | ····················································································denial·of·service |
| 122 | ····················································································by·filling·a | 131 | ····················································································by·filling·a |
| 123 | ····················································································system's·TCP | 132 | ····················································································system's·TCP |
| 124 | ····················································································connection·table | 133 | ····················································································connection·table |
| 125 | ····················································································with·connections·in | 134 | ····················································································with·connections·in |
| Offset 138, 23 lines modified | Offset 147, 14 lines modified | ||
| 138 | ····················································································flood·condition·is | 147 | ····················································································flood·condition·is |
| 139 | ····················································································detected,·and | 148 | ····················································································detected,·and |
| 140 | ····················································································enables·the·system | 149 | ····················································································enables·the·system |
| 141 | ····················································································to·continue | 150 | ····················································································to·continue |
| 142 | ····················································································servicing·valid | 151 | ····················································································servicing·valid |
| 143 | ····················································································connection | 152 | ····················································································connection |
| 144 | ····················································································requests. | 153 | ····················································································requests. |
| 145 | ····················································································iptables·controls | ||
| 146 | ····················································································the·Linux·kernel | ||
| 147 | ····················································································network·packet | ||
| 148 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 149 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 150 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 151 | ····················································································set·up·firewalls | ||
| 152 | ····················································································and·IP | ||
| 153 | ····················································································masquerading,·etc. | ||
| 154 | ····················································································Loopback·traffic·is | 154 | ····················································································Loopback·traffic·is |
| 155 | ····················································································generated·between | 155 | ····················································································generated·between |
| 156 | ····················································································processes·on | 156 | ····················································································processes·on |
| 157 | ····················································································machine·and·is | 157 | ····················································································machine·and·is |
| 158 | ····················································································typically·critical | 158 | ····················································································typically·critical |
| 159 | ····················································································to·operation·of·the | 159 | ····················································································to·operation·of·the |
| 160 | ····················································································system.·The | 160 | ····················································································system.·The |
| Offset 187, 14 lines modified | Offset 187, 48 lines modified | ||
| Max diff block lines reached; 490741/503189 bytes (97.53%) of diff not shown. | |||
| Offset 63, 274 lines modified | Offset 63, 274 lines modified | ||
| 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | ||
| 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | ||
| 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | ||
| 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | ||
| 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | ||
| 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | ||
| 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | ||
| 00000450:·3c74·643e·456e·7375·7265·2053·4d41·5020··<td>Ensure·SMAP· | |||
| 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | |||
| 00000470:·6475·7269·6e67·2062·6f6f·743c·2f74·643e··during·boot</td> | |||
| 00000450:·3c74·643e·496e·7374·616c·6c20·5041·4520··<td>Install·PAE· | |||
| 00000460:·4b65·726e·656c·206f·6e20·5375·7070·6f72··Kernel·on·Suppor | |||
| 00000470:·7465·6420·3332·2d62·6974·2078·3836·2053··ted·32-bit·x86·S | |||
| 00000480:·7973·7465·6d73·3c2f·7464·3e0a·2020·2020··ystems</td>.···· | |||
| 00000490:·2020·3c74·6420·786d·6c3a·6c61·6e67·3d22····<td·xml:lang=" | |||
| 000004a0:·656e·2d55·5322·3e0a·2020·2020·2020·2020··en-US">.········ | |||
| 000004b0:·5379·7374·656d·7320·7468·6174·2061·7265··Systems·that·are | |||
| 000004c0:·2075·7369·6e67·2074·6865·2036·342d·6269···using·the·64-bi | |||
| 000004d0:·7420·7838·3620·6b65·726e·656c·2070·6163··t·x86·kernel·pac | |||
| 000004e0:·6b61·6765·0a64·6f20·6e6f·7420·6e65·6564··kage.do·not·need | |||
| 000004f0:·2074·6f20·696e·7374·616c·6c20·7468·6520···to·install·the· | |||
| 00000500:·6b65·726e·656c·2d50·4145·2070·6163·6b61··kernel-PAE·packa | |||
| 00000510:·6765·2062·6563·6175·7365·2074·6865·2036··ge·because·the·6 | |||
| 00000520:·342d·6269·740a·7838·3620·6b65·726e·656c··4-bit.x86·kernel | |||
| 00000530:·2061·6c72·6561·6479·2069·6e63·6c75·6465···already·include | |||
| 00000540:·7320·7468·6973·2073·7570·706f·7274·2e20··s·this·support.· | |||
| 00000550:·486f·7765·7665·722c·2069·6620·7468·6520··However,·if·the· | |||
| 00000560:·7379·7374·656d·2069·730a·3332·2d62·6974··system·is.32-bit | |||
| 00000570:·2061·6e64·2061·6c73·6f20·7375·7070·6f72···and·also·suppor | |||
| 00000580:·7473·2074·6865·2050·4145·2061·6e64·204e··ts·the·PAE·and·N | |||
| 00000590:·5820·6665·6174·7572·6573·2061·730a·6465··X·features·as.de | |||
| 000005a0:·7465·726d·696e·6564·2069·6e20·7468·6520··termined·in·the· | |||
| 000005b0:·7072·6576·696f·7573·2073·6563·7469·6f6e··previous·section | |||
| 000005c0:·2c20·7468·6520·6b65·726e·656c·2d50·4145··,·the·kernel-PAE | |||
| 000005d0:·2070·6163·6b61·6765·2073·686f·756c·640a···package·should. | |||
| 000005e0:·6265·2069·6e73·7461·6c6c·6564·2074·6f20··be·installed·to· | |||
| 000005f0:·656e·6162·6c65·2058·4420·6f72·204e·5820··enable·XD·or·NX· | |||
| 00000600:·7375·7070·6f72·742e·0a54·6865·203c·636f··support..The·<co | |||
| 00000610:·6465·3e6b·6572·6e65·6c2d·5041·453c·2f63··de>kernel-PAE</c | |||
| 00000620:·6f64·653e·2070·6163·6b61·6765·2063·616e··ode>·package·can | |||
| 00000630:·2062·6520·696e·7374·616c·6c65·6420·7769···be·installed·wi | |||
| 00000640:·7468·2074·6865·2066·6f6c·6c6f·7769·6e67··th·the·following | |||
| 00000650:·2063·6f6d·6d61·6e64·3a0a·3c70·7265·3e0a···command:.<pre>. | |||
| 00000660:·2420·7375·646f·2079·756d·2069·6e73·7461··$·sudo·yum·insta | |||
| 00000670:·6c6c·206b·6572·6e65·6c2d·5041·453c·2f70··ll·kernel-PAE</p | |||
| 00000680:·7265·3e0a·5468·6520·696e·7374·616c·6c61··re>.The·installa | |||
| 00000690:·7469·6f6e·2070·726f·6365·7373·2073·686f··tion·process·sho | |||
| 000006a0:·756c·6420·616c·736f·2068·6176·6520·636f··uld·also·have·co | |||
| 000006b0:·6e66·6967·7572·6564·2074·6865·0a62·6f6f··nfigured·the.boo | |||
| 000006c0:·746c·6f61·6465·7220·746f·206c·6f61·6420··tloader·to·load· | |||
| 000006d0:·7468·6520·6e65·7720·6b65·726e·656c·2061··the·new·kernel·a | |||
| 000006e0:·7420·626f·6f74·2e20·5665·7269·6679·2074··t·boot.·Verify·t | |||
| 000006f0:·6869·7320·6166·7465·7220·7265·626f·6f74··his·after·reboot | |||
| 00000700:·0a61·6e64·206d·6f64·6966·7920·3c74·743e··.and·modify·<tt> | |||
| 00000710:·2f65·7463·2f64·6566·6175·6c74·2f67·7275··/etc/default/gru | |||
| 00000720:·623c·2f74·743e·2069·6620·6e65·6365·7373··b</tt>·if·necess | |||
| 00000730:·6172·792e·0a20·2020·2020·203c·2f74·643e··ary..······</td> | |||
| 00000 | 00000480:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000 | 00000490:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 000004a0:·2020·2020·2054·6865·2053·4d41·5020·6973·······The·SMAP·is | |||
| 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | |||
| 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | |||
| 000004d0:·6d6f·6465·2066·726f·6d20·756e·696e·7465··mode·from·uninte | |||
| 000004e0:·6e74·696f·6e61·6c6c·7920·7265·6164·696e··ntionally·readin | |||
| 000004f0:·672f·7772·6974·696e·6720·696e·746f·0a6d··g/writing·into.m | |||
| 00000500:·656d·6f72·7920·7061·6765·7320·696e·2074··emory·pages·in·t | |||
| 00000510:·6865·2075·7365·7220·7370·6163·652c·2069··he·user·space,·i | |||
| 00000760:·2020·2020·204f·6e20·3332·2d62·6974·2073·······On·32-bit·s | |||
| 00000770:·7973·7465·6d73·2074·6861·7420·7375·7070··ystems·that·supp | |||
| 00000780:·6f72·7420·7468·6520·5844·206f·7220·4e58··ort·the·XD·or·NX | |||
| 00000790:·2062·6974·2c20·7468·6520·7665·6e64·6f72···bit,·the·vendor | |||
| 000007a0:·2d73·7570·706c·6965·640a·5041·4520·6b65··-supplied.PAE·ke | |||
| 000007b0:·726e·656c·2069·7320·7265·7175·6972·6564··rnel·is·required | |||
| 000007c0:·2074·6f20·656e·6162·6c65·2065·6974·6865···to·enable·eithe | |||
| 000007d0:·7220·4578·6563·7574·6520·4469·7361·626c··r·Execute·Disabl | |||
| 000007e0:·6520·2858·4429·206f·7220·4e6f·2045·7865··e·(XD)·or·No·Exe | |||
| 000007f0:·6375·7465·2028·4e58·2920·7375·7070·6f72··cute·(NX)·suppor | |||
| 00000800:·742e·0a20·2020·2020·203c·2f74·643e·0a20··t..······</td>.· | |||
| 00000810:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | |||
| 00000820:·3e0a·2020·2020·2020·3c74·643e·5231·3c2f··>.······<td>R1</ | |||
| 00000830:·7464·3e0a·2020·2020·2020·3c74·643e·456e··td>.······<td>En | |||
| 00000840:·7375·7265·2053·4d45·5020·6973·206e·6f74··sure·SMEP·is·not | |||
| 00000850:·2064·6973·6162·6c65·6420·6475·7269·6e67···disabled·during | |||
| 00000860:·2062·6f6f·743c·2f74·643e·0a20·2020·2020···boot</td>.····· | |||
| 00000870:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | |||
| 00000880:·6e2d·5553·223e·0a20·2020·2020·2020·2054··n-US">.········T | |||
| 00000890:·6865·2053·4d45·5020·6973·2075·7365·6420··he·SMEP·is·used· | |||
| 000008a0:·746f·2070·7265·7665·6e74·2074·6865·2073··to·prevent·the·s | |||
| 000008b0:·7570·6572·7669·736f·7220·6d6f·6465·2066··upervisor·mode·f | |||
| 000008c0:·726f·6d20·6578·6563·7574·696e·6720·7573··rom·executing·us | |||
| 000008d0:·6572·2073·7061·6365·2063·6f64·652c·0a69··er·space·code,.i | |||
| 00000 | 00000520:·7420·6973·2065·6e61·626c·6564·2062·7920··t·is·enabled·by· | ||
| 00000 | 00000530:·6465·6661·756c·7420·7369·6e63·6520·4c69··default·since·Li | ||
| 00000 | 00000540:·6e75·7820·6b65·726e·656c·2033·2e37·2e0a··nux·kernel·3.7.. | ||
| 00000 | 00000550:·4275·7420·6974·2063·6f75·6c64·2062·6520··But·it·could·be· | ||
| 00000 | 00000560:·6469·7361·626c·6564·2074·6872·6f75·6768··disabled·through | ||
| 00000 | 00000570:·206b·6572·6e65·6c20·626f·6f74·2070·6172···kernel·boot·par | ||
| 00000 | 00000580:·616d·6574·6572·732e·0a0a·456e·7375·7265··ameters...Ensure | ||
| 00000 | 00000590:·2074·6861·7420·5375·7065·7276·6973·6f72···that·Supervisor | ||
| 000005a0:·204d·6f64·6520·4163·6365·7373·2050·7265···Mode·Access·Pre | |||
| 000005b0:·7665·6e74·696f·6e20·2853·4d41·5029·2069··vention·(SMAP)·i | |||
| 00000960:·204d·6f64·6520·4578·6563·7574·696f·6e20···Mode·Execution· | |||
| 00000970:·5072·6576·656e·7469·6f6e·2028·534d·4550··Prevention·(SMEP | |||
| 00000980:·2920·6973·206e·6f74·2064·6973·6162·6c65··)·is·not·disable | |||
| 00000990:·6420·6279·0a74·6865·203c·7474·3e6e·6f73··d·by.the·<tt>nos | |||
| 000009a0:·6d65·703c·2f74·743e·2062·6f6f·7420·7061··mep</tt>·boot·pa | |||
| 000009b0:·7261·6d65·6e74·6572·206f·7074·696f·6e2e··ramenter·option. | |||
| 000009c0:·0a0a·4368·6563·6b20·7468·6174·2074·6865··..Check·that·the | |||
| 000009d0:·206c·696e·6520·3c70·7265·3e47·5255·425f···line·<pre>GRUB_ | |||
| 000009e0:·434d·444c·494e·455f·4c49·4e55·583d·222e··CMDLINE_LINUX=". | |||
| 000009f0:·2e2e·223c·2f70·7265·3e20·7769·7468·696e··.."</pre>·within | |||
| 00000a00:·203c·7474·3e2f·6574·632f·6465·6661·756c···<tt>/etc/defaul | |||
| 00000a10:·742f·6772·7562·3c2f·7474·3e0a·646f·6573··t/grub</tt>.does | |||
| 00000a20:·6e27·7420·636f·6e74·6169·6e20·7468·6520··n't·contain·the· | |||
| 00000a30:·6172·6775·6d65·6e74·203c·7474·3e6e·6f73··argument·<tt>nos | |||
| 00000a40:·6d65·703c·2f74·743e·2e0a·5275·6e20·7468··mep</tt>..Run·th | |||
| 00000a50:·6520·666f·6c6c·6f77·696e·6720·636f·6d6d··e·following·comm | |||
| 00000a60:·616e·6420·746f·2075·7064·6174·6520·636f··and·to·update·co | |||
| 00000a70:·6d6d·616e·6420·6c69·6e65·2066·6f72·2061··mmand·line·for·a | |||
| 00000a80:·6c72·6561·6479·2069·6e73·7461·6c6c·6564··lready·installed | |||
| 00000a90:·206b·6572·6e65·6c73·3a0a·3c70·7265·3e23···kernels:.<pre># | |||
| 00000aa0:·2067·7275·6262·7920·2d2d·7570·6461·7465···grubby·--update | |||
| 00000ab0:·2d6b·6572·6e65·6c3d·414c·4c20·2d2d·7265··-kernel=ALL·--re | |||
| 00000ac0:·6d6f·7665·2d61·7267·733d·226e·6f73·6d65··move-args="nosme | |||
| 00000ad0:·7022·3c2f·7072·653e·0a20·2020·2020·203c··p"</pre>.······< | |||
| 00000ae0:·2f74·643e·0a20·2020·2020·203c·7464·2078··/td>.······<td·x | |||
| 00000af0:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> | |||
| Max diff block lines reached; 2968987/3005441 bytes (98.79%) of diff not shown. | |||
| Offset 1, 13 lines modified | Offset 1, 29 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux |
| 2 | 8 | 2 | 8 |
| 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 4 | ······························mode·from·unintentionally·reading/writing | ||
| 5 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 6 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 7 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 8 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 10 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 11 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 12 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 13 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 14 | ······························argument·nosmap.·Run·the·following·command | ||
| 15 | ······························to·update·command·line·for·already·installed | ||
| 16 | ······························kernels: | ||
| 17 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 18 | ······························args="nosmap" | ||
| 3 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 19 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 4 | ······························package·do·not·need·to·install·the·kernel- | 20 | ······························package·do·not·need·to·install·the·kernel- |
| 5 | ······························PAE·package·because·the·64-bit·x86·kernel | 21 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 6 | ······························already·includes·this·support.·However,·if | 22 | ······························already·includes·this·support.·However,·if |
| 7 | ······························the·system·is·32-bit·and·also·supports·the | 23 | ······························the·system·is·32-bit·and·also·supports·the |
| 8 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 24 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 9 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 25 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 15, 14 lines modified | Offset 31, 30 lines modified | ||
| 15 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 31 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 16 | ······························installed·with·the·following·command:········(NX)·support. | 32 | ······························installed·with·the·following·command:········(NX)·support. |
| 17 | ······························$·sudo·yum·install·kernel-PAE | 33 | ······························$·sudo·yum·install·kernel-PAE |
| 18 | ······························The·installation·process·should·also·have | 34 | ······························The·installation·process·should·also·have |
| 19 | ······························configured·the·bootloader·to·load·the·new | 35 | ······························configured·the·bootloader·to·load·the·new |
| 20 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 36 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 21 | ······························modify·/etc/default/grub·if·necessary. | 37 | ······························modify·/etc/default/grub·if·necessary. |
| 38 | ···········································································Use·of·a·64-bit·operating·system | ||
| 39 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 40 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 41 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 42 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 43 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 44 | ···········································································bits. | ||
| 45 | ···········································································Use·of·weak·or·untested·encryption | ||
| 46 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 47 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 48 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 49 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 50 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 51 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 52 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 53 | ···········································································validated. | ||
| 22 | ······························The·SMEP·is·used·to·prevent·the·supervisor | 54 | ······························The·SMEP·is·used·to·prevent·the·supervisor |
| 23 | ······························mode·from·executing·user·space·code,·it·is | 55 | ······························mode·from·executing·user·space·code,·it·is |
| 24 | ······························enabled·by·default·since·Linux·kernel·3.0. | 56 | ······························enabled·by·default·since·Linux·kernel·3.0. |
| 25 | ······························But·it·could·be·disabled·through·kernel·boot | 57 | ······························But·it·could·be·disabled·through·kernel·boot |
| 26 | ······························parameters.·Ensure·that·Supervisor·Mode | 58 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 27 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | 59 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate |
| 28 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | 60 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain |
| Offset 30, 46 lines modified | Offset 62, 14 lines modified | ||
| 30 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 62 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 31 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 63 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 32 | ······························argument·nosmep.·Run·the·following·command | 64 | ······························argument·nosmep.·Run·the·following·command |
| 33 | ······························to·update·command·line·for·already·installed | 65 | ······························to·update·command·line·for·already·installed |
| 34 | ······························kernels: | 66 | ······························kernels: |
| 35 | ······························#·grubby·--update-kernel=ALL·--remove- | 67 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 36 | ······························args="nosmep" | 68 | ······························args="nosmep" |
| 37 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 38 | ······························mode·from·unintentionally·reading/writing | ||
| 39 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 40 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 41 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 42 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 43 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 44 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 45 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 46 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 47 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 48 | ······························argument·nosmap.·Run·the·following·command | ||
| 49 | ······························to·update·command·line·for·already·installed | ||
| 50 | ······························kernels: | ||
| 51 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 52 | ······························args="nosmap" | ||
| 53 | ···········································································Use·of·weak·or·untested·encryption | ||
| 54 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 55 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 56 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 57 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 58 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 59 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 60 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 61 | ···········································································validated. | ||
| 62 | ···········································································Use·of·a·64-bit·operating·system | ||
| 63 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 64 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 65 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 66 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 67 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 68 | ···········································································bits. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 90 lines modified | Offset 99, 70 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ···········································································The·CONFIG_SHUFFLE_PAGE_ALLOCATOR | ||
| 107 | ······························To·enable·randomization·of·the·page··········config·option·is·primarily·focused·on | ||
| 108 | ······························allocator·in·the·kernel,·add·the·············improving·the·average·utilization·of·a | ||
| 109 | ······························page_alloc.shuffle=1·argument·to·the·default·direct-mapped·memory-side-cache.·Aside | ||
| 110 | ······························GRUB·2·command·line.·To·ensure·that··········of·this·performance·effect,·it·also | ||
| 111 | ······························page_alloc.shuffle=1·is·added·as·a·kernel····reduces·predictability·of·page | ||
| 112 | ······························command·line·argument·to·newly·installed·····allocations·in·situations·when·the·bad | ||
| 113 | ······························kernels,·add·page_alloc.shuffle=1·to·the·····actor·can·crash·the·system·and·somehow | ||
| 114 | R8··Enable·randomization·of···default·Grub2·command·line·for·Linux·········leverage·knowledge·of·(page) | ||
| 115 | ····the·page·allocator········operating·systems.·Modify·the·line·within·/··allocation·order·right·after·a·fresh | ||
| 116 | ······························etc/default/grub·as·shown·below:·············reboot,·or·can·control·the·timing | ||
| 117 | ······························GRUB_CMDLINE_LINUX="...·page_alloc.shuffle=1·between·a·hot-pluggable·memory·node | ||
| Max diff block lines reached; 671757/684605 bytes (98.12%) of diff not shown. | |||
| Offset 40, 26 lines modified | Offset 40, 83 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1</td> | ||
| 48 | ······<td>Disable·GDM·Automatic·Login</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | ||
| 51 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 52 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 53 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 54 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 55 | <pre>[daemon] | ||
| 56 | AutomaticLoginEnable=false</pre> | ||
| 57 | ······</td> | ||
| 58 | ······<td·xml:lang="en-US"> | ||
| 59 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 60 | system·security. | ||
| 61 | ······</td> | ||
| 62 | ····</tr> | ||
| 63 | ····<tr> | ||
| 64 | ······<td>3.1.1<br/>3.4.5</td> | ||
| 65 | ······<td>Require·Authentication·for·Emergency·Systemd·Target</td> | ||
| 66 | ······<td·xml:lang="en-US"> | ||
| 67 | ········Emergency·mode·is·intended·as·a·system·recovery | ||
| 68 | method,·providing·a·single·user·root·access·to·the·system | ||
| 69 | during·a·failed·boot·sequence. | ||
| 70 | <br·/><br·/> | ||
| 71 | By·default,·Emergency·mode·is·protected·by·requiring·a·password·and·is·set | ||
| 72 | in·<tt>/usr/lib/systemd/system/emergency.service</tt>. | ||
| 73 | ······</td> | ||
| 74 | ······<td·xml:lang="en-US"> | ||
| 75 | ········This·prevents·attackers·with·physical·access·from·trivially·bypassing·security | ||
| 76 | on·the·machine·and·gaining·root·access.·Such·accesses·are·further·prevented | ||
| 77 | by·configuring·the·bootloader·password. | ||
| 78 | ······</td> | ||
| 79 | ····</tr> | ||
| 80 | ····<tr> | ||
| 47 | ······<td>3.1.1<br/>3.1.5</td> | 81 | ······<td>3.1.1<br/>3.1.5</td> |
| 48 | ······<td> | 82 | ······<td>Disable·SSH·Root·Login</td> |
| 49 | ······<td·xml:lang="en-US"> | 83 | ······<td·xml:lang="en-US"> |
| 50 | ········To·restrict·root·logins·on·serial·ports, | ||
| 51 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 52 | <pre>ttyS0 | ||
| 53 | t | 84 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 85 | system·directly·over·a·network. | ||
| 86 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 87 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 88 | <pre>PermitRootLogin·no</pre> | ||
| 54 | ······</td> | 89 | ······</td> |
| 55 | ······<td·xml:lang="en-US"> | 90 | ······<td·xml:lang="en-US"> |
| 56 | ········Preventing·direct·root·login·to·serial·port·interfaces | ||
| 57 | helps·ensure·accountability·for·actions·taken·on·the·systems | ||
| 58 | 91 | ········Even·though·the·communications·channel·may·be·encrypted,·an·additional·layer·of | |
| 92 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | ||
| 93 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | ||
| 94 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | ||
| 95 | direct·attack·attempts·on·root's·password. | ||
| 96 | ······</td> | ||
| 97 | ····</tr> | ||
| 98 | ····<tr> | ||
| 99 | ······<td>3.1.1<br/>3.4.5</td> | ||
| 100 | ······<td>Require·Authentication·for·Single·User·Mode</td> | ||
| 101 | ······<td·xml:lang="en-US"> | ||
| 102 | ········Single-user·mode·is·intended·as·a·system·recovery | ||
| 103 | method,·providing·a·single·user·root·access·to·the·system·by | ||
| 104 | providing·a·boot·option·at·startup. | ||
| 105 | <br·/><br·/> | ||
| 106 | By·default,·single-user·mode·is·protected·by·requiring·a·password·and·is·set | ||
| 107 | in·<tt>/usr/lib/systemd/system/rescue.service</tt>. | ||
| 108 | ······</td> | ||
| 109 | ······<td·xml:lang="en-US"> | ||
| 110 | ········This·prevents·attackers·with·physical·access·from·trivially·bypassing·security | ||
| 111 | on·the·machine·and·gaining·root·access.·Such·accesses·are·further·prevented | ||
| 112 | by·configuring·the·bootloader·password. | ||
| 59 | ······</td> | 113 | ······</td> |
| 60 | ····</tr> | 114 | ····</tr> |
| 61 | ····<tr> | 115 | ····<tr> |
| 62 | ······<td>3.1.1<br/>3.1.5</td> | 116 | ······<td>3.1.1<br/>3.1.5</td> |
| 63 | ······<td>Verify·Only·Root·Has·UID·0</td> | 117 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 64 | ······<td·xml:lang="en-US"> | 118 | ······<td·xml:lang="en-US"> |
| 65 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | 119 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should |
| Offset 77, 14 lines modified | Offset 134, 31 lines modified | ||
| 77 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | 134 | guess·a·password·for·a·privileged·account.·Proper·configuration·of |
| 78 | sudo·is·recommended·to·afford·multiple·system·administrators | 135 | sudo·is·recommended·to·afford·multiple·system·administrators |
| 79 | access·to·root·privileges·in·an·accountable·manner. | 136 | access·to·root·privileges·in·an·accountable·manner. |
| 80 | ······</td> | 137 | ······</td> |
| 81 | ····</tr> | 138 | ····</tr> |
| 82 | ····<tr> | 139 | ····<tr> |
| 83 | ······<td>3.1.1<br/>3.1.5</td> | 140 | ······<td>3.1.1<br/>3.1.5</td> |
| 141 | ······<td>Restrict·Virtual·Console·Root·Logins</td> | ||
| 142 | ······<td·xml:lang="en-US"> | ||
| 143 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 144 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 145 | <pre>vc/1 | ||
| 146 | vc/2 | ||
| 147 | vc/3 | ||
| 148 | vc/4</pre> | ||
| 149 | ······</td> | ||
| 150 | ······<td·xml:lang="en-US"> | ||
| 151 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 152 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 153 | using·the·root·account. | ||
| 154 | ······</td> | ||
| 155 | ····</tr> | ||
| 156 | ····<tr> | ||
| 157 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 84 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | 158 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> |
| 85 | ······<td·xml:lang="en-US"> | 159 | ······<td·xml:lang="en-US"> |
| 86 | ········If·an·account·is·configured·for·password·authentication | 160 | ········If·an·account·is·configured·for·password·authentication |
| 87 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | 161 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log |
| 88 | into·the·account·without·authentication.·Remove·any·instances·of·the | 162 | into·the·account·without·authentication.·Remove·any·instances·of·the |
| 89 | <tt>nullok</tt>·in | 163 | <tt>nullok</tt>·in |
| Offset 96, 48 lines modified | Offset 170, 14 lines modified | ||
| 96 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| 97 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | 171 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and |
| 98 | run·commands·with·the·privileges·of·that·account.·Accounts·with | 172 | run·commands·with·the·privileges·of·that·account.·Accounts·with |
| 99 | empty·passwords·should·never·be·used·in·operational·environments. | 173 | empty·passwords·should·never·be·used·in·operational·environments. |
| 100 | ······</td> | 174 | ······</td> |
| 101 | ····</tr> | 175 | ····</tr> |
| Max diff block lines reached; 456852/461877 bytes (98.91%) of diff not shown. | |||
| Offset 1, 21 lines modified | Offset 1, 66 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of |
| 2 | Oracle·Linux·8 | 2 | Oracle·Linux·8 |
| 3 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 4 | ·······································automatically·login·without·user·interaction·or | ||
| 5 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | ||
| 6 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | ||
| 7 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users | ||
| 8 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts | ||
| 9 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system | ||
| 10 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. | ||
| 11 | ·······································[daemon] | ||
| 12 | ·······································AutomaticLoginEnable=false | ||
| 13 | ······························································································This·prevents | ||
| 14 | ······························································································attackers·with | ||
| 15 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | ||
| 16 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | ||
| 17 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | ||
| 18 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | ||
| 19 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | ||
| 20 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | ||
| 21 | ·······································emergency.service.·····································prevented·by | ||
| 22 | ······························································································configuring·the | ||
| 23 | ······························································································bootloader·password. | ||
| 3 | ······························································································ | 24 | ······························································································Even·though·the |
| 25 | ······························································································communications | ||
| 26 | ······························································································channel·may·be | ||
| 27 | ······························································································encrypted,·an | ||
| 28 | ······························································································additional·layer·of | ||
| 4 | ······························································································ | 29 | ······························································································security·is·gained |
| 5 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 6 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 7 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 8 | ·······································ttyS1··················································actions·taken·on·the | ||
| 9 | ······························································································ | 30 | ······························································································by·extending·the |
| 31 | ······························································································policy·of·not | ||
| 32 | ·······································The·root·user·should·never·be·allowed·to·login·to·a····logging·directly·on | ||
| 33 | 3.1.1··································system·directly·over·a·network.·To·disable·root·login··as·root.·In | ||
| 34 | 3.1.5···Disable·SSH·Root·Login·········via·SSH,·add·or·correct·the·following·line·in·/etc/····addition,·logging·in | ||
| 35 | ·······································ssh/sshd_config:·······································with·a·user-specific | ||
| 36 | ·······································PermitRootLogin·no·····································account·provides | ||
| 37 | ······························································································individual | ||
| 10 | ······························································································ | 38 | ······························································································accountability·of |
| 39 | ······························································································actions·performed·on | ||
| 40 | ······························································································the·system·and·also | ||
| 41 | ······························································································helps·to·minimize | ||
| 42 | ······························································································direct·attack | ||
| 43 | ······························································································attempts·on·root's | ||
| 44 | ······························································································password. | ||
| 45 | ······························································································This·prevents | ||
| 46 | ······························································································attackers·with | ||
| 47 | ·······································Single-user·mode·is·intended·as·a·system·recovery······physical·access·from | ||
| 48 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | ||
| 49 | 3.1.1···Require·Authentication·for·····system·by·providing·a·boot·option·at·startup.··········security·on·the | ||
| 50 | 3.4.5···Single·User·Mode······································································machine·and·gaining | ||
| 51 | ·······································By·default,·single-user·mode·is·protected·by·requiring·root·access.·Such | ||
| 52 | ·······································a·password·and·is·set·in·/usr/lib/systemd/system/······accesses·are·further | ||
| 53 | ·······································rescue.service.········································prevented·by | ||
| 54 | ······························································································configuring·the | ||
| 55 | ······························································································bootloader·password. | ||
| 11 | ······························································································An·account·has·root | 56 | ······························································································An·account·has·root |
| 12 | ······························································································authority·if·it·has | 57 | ······························································································authority·if·it·has |
| 13 | ······························································································a·UID·of·0.·Multiple | 58 | ······························································································a·UID·of·0.·Multiple |
| 14 | ······························································································accounts·with·a·UID | 59 | ······························································································accounts·with·a·UID |
| 15 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | 60 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more |
| 16 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | 61 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for |
| 17 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | 62 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders |
| Offset 26, 85 lines modified | Offset 71, 51 lines modified | ||
| 26 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended | 71 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended |
| 27 | ·······································assigned.··············································to·afford·multiple | 72 | ·······································assigned.··············································to·afford·multiple |
| 28 | ······························································································system | 73 | ······························································································system |
| 29 | ······························································································administrators | 74 | ······························································································administrators |
| 30 | ······························································································access·to·root | 75 | ······························································································access·to·root |
| 31 | ······························································································privileges·in·an | 76 | ······························································································privileges·in·an |
| 32 | ······························································································accountable·manner. | 77 | ······························································································accountable·manner. |
| 78 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 79 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 80 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 81 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 82 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 83 | ·······································vc/3···················································actions·taken·on·the | ||
| 84 | ·······································vc/4···················································system·using·the | ||
| 85 | ······························································································root·account. | ||
| 33 | ······························································································If·an·account·has·an | 86 | ······························································································If·an·account·has·an |
| 34 | ······························································································empty·password, | 87 | ······························································································empty·password, |
| 35 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | 88 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in |
| 36 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | 89 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands |
| 37 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | 90 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges |
| 38 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | 91 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. |
| 39 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | 92 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty |
| 40 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | 93 | ·······································prevent·logins·with·empty·passwords.···················passwords·should |
| 41 | ······························································································never·be·used·in | 94 | ······························································································never·be·used·in |
| 42 | ······························································································operational | 95 | ······························································································operational |
| 43 | ······························································································environments. | 96 | ······························································································environments. |
| 44 | ······························································································This·prevents | ||
| 45 | ······························································································attackers·with | ||
| 46 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | ||
| 47 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | ||
| 48 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | ||
| 49 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | ||
| 50 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | ||
| 51 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | ||
| 52 | ·······································emergency.service.·····································prevented·by | ||
| 53 | ······························································································configuring·the | ||
| 54 | ······························································································bootloader·password. | ||
| 55 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 56 | ·······································automatically·login·without·user·interaction·or | ||
| 57 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | ||
| 58 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | ||
| 59 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users | ||
| 60 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts | ||
| 61 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system | ||
| 62 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. | ||
| 63 | ·······································[daemon] | ||
| 64 | ·······································AutomaticLoginEnable=false | ||
| 65 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | 97 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to |
| 66 | ·······································login·without·credentials·which·can·be·useful·for | 98 | ·······································login·without·credentials·which·can·be·useful·for |
| 67 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | 99 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict |
| 68 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | 100 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to |
| 69 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | 101 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users |
| 70 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | 102 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts |
| 71 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | 103 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system |
| 72 | ·······································etc/gdm/custom.conf.·For·example:······················security. | 104 | ·······································etc/gdm/custom.conf.·For·example:······················security. |
| 73 | ·······································[daemon] | 105 | ·······································[daemon] |
| Max diff block lines reached; 804232/817951 bytes (98.32%) of diff not shown. | |||
| Offset 24360, 17 lines modified | Offset 24360, 17 lines modified | ||
| 0005f270:·0a74·696d·652d·6261·7365·6420·6c69·6d69··.time-based·limi | 0005f270:·0a74·696d·652d·6261·7365·6420·6c69·6d69··.time-based·limi | ||
| 0005f280:·742c·2065·6666·6563·7473·206f·6620·706f··t,·effects·of·po | 0005f280:·742c·2065·6666·6563·7473·206f·6620·706f··t,·effects·of·po | ||
| 0005f290:·7465·6e74·6961·6c20·6174·7461·636b·7320··tential·attacks· | 0005f290:·7465·6e74·6961·6c20·6174·7461·636b·7320··tential·attacks· | ||
| 0005f2a0:·6167·6169·6e73·740a·656e·6372·7970·7469··against.encrypti | 0005f2a0:·6167·6169·6e73·740a·656e·6372·7970·7469··against.encrypti | ||
| 0005f2b0:·6f6e·206b·6579·7320·6172·6520·6c69·6d69··on·keys·are·limi | 0005f2b0:·6f6e·206b·6579·7320·6172·6520·6c69·6d69··on·keys·are·limi | ||
| 0005f2c0:·7465·642e·0a20·203c·2f74·643e·0a20·203c··ted..··</td>.··< | 0005f2c0:·7465·642e·0a20·203c·2f74·643e·0a20·203c··ted..··</td>.··< | ||
| 0005f2d0:·7464·3e76·6172·5f72·656b·6579·5f6c·696d··td>var_rekey_lim | 0005f2d0:·7464·3e76·6172·5f72·656b·6579·5f6c·696d··td>var_rekey_lim | ||
| 0005f2e0:·6974·5f73·697a·653d·3147·3c62·722f·3e76··it_size=1G<br/>v | |||
| 0005f2 | 0005f2e0:·6974·5f74·696d·653d·3168·6f75·723c·6272··it_time=1hour<br | ||
| 0005f2f0:·2f3e·7661·725f·7265·6b65·795f·6c69·6d69··/>var_rekey_limi | |||
| 0005f300:· | 0005f300:·745f·7369·7a65·3d31·473c·2f74·643e·0a3c··t_size=1G</td>.< | ||
| 0005f310:·2f74·723e·0a3c·7472·3e0a·2020·3c74·643e··/tr>.<tr>.··<td> | 0005f310:·2f74·723e·0a3c·7472·3e0a·2020·3c74·643e··/tr>.<tr>.··<td> | ||
| 0005f320:·3c2f·7464·3e0a·2020·3c74·643e·4e2f·413c··</td>.··<td>N/A< | 0005f320:·3c2f·7464·3e0a·2020·3c74·643e·4e2f·413c··</td>.··<td>N/A< | ||
| 0005f330:·2f74·643e·0a20·203c·7464·3e53·5348·2073··/td>.··<td>SSH·s | 0005f330:·2f74·643e·0a20·203c·7464·3e53·5348·2073··/td>.··<td>SSH·s | ||
| 0005f340:·6572·7665·7220·7573·6573·2073·7472·6f6e··erver·uses·stron | 0005f340:·6572·7665·7220·7573·6573·2073·7472·6f6e··erver·uses·stron | ||
| 0005f350:·6720·656e·7472·6f70·7920·746f·2073·6565··g·entropy·to·see | 0005f350:·6720·656e·7472·6f70·7920·746f·2073·6565··g·entropy·to·see | ||
| 0005f360:·643c·2f74·643e·0a20·203c·7464·2078·6d6c··d</td>.··<td·xml | 0005f360:·643c·2f74·643e·0a20·203c·7464·2078·6d6c··d</td>.··<td·xml | ||
| 0005f370:·3a6c·616e·673d·2265·6e2d·5553·223e·0a54··:lang="en-US">.T | 0005f370:·3a6c·616e·673d·2265·6e2d·5553·223e·0a54··:lang="en-US">.T |
| Offset 7762, 16 lines modified | Offset 7762, 16 lines modified | ||
| 7762 | ·································private·key.··········································system·where·the | 7762 | ·································private·key.··········································system·where·the |
| 7763 | ·······················································································associated·public | 7763 | ·······················································································associated·public |
| 7764 | ·······················································································key·has·been | 7764 | ·······················································································key·has·been |
| 7765 | ·······················································································installed. | 7765 | ·······················································································installed. |
| 7766 | ·································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the | 7766 | ·································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the |
| 7767 | ·································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the | 7767 | ·································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the |
| 7768 | ···········Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and | 7768 | ···········Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and |
| 7769 | ········N/·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_ | 7769 | ········N/·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_time=1hour |
| 7770 | ········A··renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_ | 7770 | ········A··renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_size=1G |
| 7771 | ·································following·line·in·/etc/ssh/sshd_config:···············potential·attacks | 7771 | ·································following·line·in·/etc/ssh/sshd_config:···············potential·attacks |
| 7772 | ·································RekeyLimit·1G·1hour···································against·encryption | 7772 | ·································RekeyLimit·1G·1hour···································against·encryption |
| 7773 | ·······················································································keys·are·limited. | 7773 | ·······················································································keys·are·limited. |
| 7774 | ·······················································································SSH·implementation | 7774 | ·······················································································SSH·implementation |
| 7775 | ·······················································································in·Oracle·Linux·8 | 7775 | ·······················································································in·Oracle·Linux·8 |
| 7776 | ·······················································································uses·the·openssl | 7776 | ·······················································································uses·the·openssl |
| 7777 | ·······················································································library,·which | 7777 | ·······················································································library,·which |
| Offset 66, 14332 lines modified | Offset 66, 14332 lines modified | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | ||
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | ||
| 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | Diff chunk too large, falling back to line-by-line diff (3752 lines added, 3752 lines removed) | |
| 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | ||
| 00000480:·2020·2020·2020·3c74·643e· | 00000480:·2020·2020·2020·3c74·643e·5265·636f·7264········<td>Record | ||
| 00000490:·20 | 00000490:·2041·7474·656d·7074·7320·746f·2041·6c74···Attempts·to·Alt | ||
| 000004a0:· | 000004a0:·6572·2054·696d·6520·5468·726f·7567·6820··er·Time·Through· | ||
| 000004b0:·746 | 000004b0:·7374·696d·653c·2f74·643e·0a20·2020·2020··stime</td>.····· | ||
| 000004c0:· | 000004c0:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | ||
| 000004d0:· | 000004d0:·6e2d·5553·223e·0a20·2020·2020·2020·2049··n-US">.········I | ||
| 000004e0:· | 000004e0:·6620·7468·6520·3c74·743e·6175·6469·7464··f·the·<tt>auditd | ||
| 000004f0:· | 000004f0:·3c2f·7474·3e20·6461·656d·6f6e·2069·7320··</tt>·daemon·is· | ||
| 00000500:· | 00000500:·636f·6e66·6967·7572·6564·2074·6f20·7573··configured·to·us | ||
| 00000510:· | 00000510:·6520·7468·650a·3c74·743e·6175·6765·6e72··e·the.<tt>augenr | ||
| 00000520:· | 00000520:·756c·6573·3c2f·7474·3e20·7072·6f67·7261··ules</tt>·progra | ||
| 00000530:· | 00000530:·6d20·746f·2072·6561·6420·6175·6469·7420··m·to·read·audit· | ||
| 00000540:· | 00000540:·7275·6c65·7320·6475·7269·6e67·2064·6165··rules·during·dae | ||
| 00000550:· | 00000550:·6d6f·6e20·7374·6172·7475·7020·2874·6865··mon·startup·(the | ||
| 00000560:· | 00000560:·0a64·6566·6175·6c74·292c·2061·6464·2074··.default),·add·t | ||
| 00000570:· | 00000570:·6865·2066·6f6c·6c6f·7769·6e67·206c·696e··he·following·lin | ||
| 00000580:· | 00000580:·6520·746f·2061·2066·696c·6520·7769·7468··e·to·a·file·with | ||
| 00000590:· | 00000590:·2073·7566·6669·7820·3c74·743e·2e72·756c···suffix·<tt>.rul | ||
| 000005a0:· | 000005a0:·6573·3c2f·7474·3e20·696e·2074·6865·0a64··es</tt>·in·the.d | ||
| 000005b0:· | 000005b0:·6972·6563·746f·7279·203c·7474·3e2f·6574··irectory·<tt>/et | ||
| 000005c0:· | 000005c0:·632f·6175·6469·742f·7275·6c65·732e·643c··c/audit/rules.d< | ||
| 000005d0:·2 | 000005d0:·2f74·743e·2066·6f72·2062·6f74·6820·3332··/tt>·for·both·32 | ||
| 000005e0:· | 000005e0:·2062·6974·2061·6e64·2036·3420·6269·7420···bit·and·64·bit· | ||
| 000005f0:·7 | 000005f0:·7379·7374·656d·733a·0a3c·7072·653e·2d61··systems:.<pre>-a | ||
| 00000600:·206 | 00000600:·2061·6c77·6179·732c·6578·6974·202d·4620···always,exit·-F· | ||
| 00000610:·672 | 00000610:·6172·6368·3d62·3332·202d·5320·7374·696d··arch=b32·-S·stim | ||
| 00000620:· | 00000620:·6520·2d46·206b·6579·3d61·7564·6974·5f74··e·-F·key=audit_t | ||
| 00000630:· | 00000630:·696d·655f·7275·6c65·733c·2f70·7265·3e0a··ime_rules</pre>. | ||
| 00000640:· | 00000640:·5369·6e63·6520·7468·6520·3634·2062·6974··Since·the·64·bit | ||
| 00000650:· | 00000650:·2076·6572·7369·6f6e·206f·6620·7468·6520···version·of·the· | ||
| 00000660:· | 00000660:·2273·7469·6d65·2220·7379·7374·656d·2063··"stime"·system·c | ||
| 00000670:· | 00000670:·616c·6c20·6973·206e·6f74·2064·6566·696e··all·is·not·defin | ||
| 00000680:· | 00000680:·6564·2069·6e20·7468·6520·6175·6469·740a··ed·in·the·audit. | ||
| 00000690:· | 00000690:·6c6f·6f6b·7570·2074·6162·6c65·2c20·7468··lookup·table,·th | ||
| 000006a0:· | 000006a0:·6520·636f·7272·6573·706f·6e64·696e·6720··e·corresponding· | ||
| 000006b0:·2d46 | 000006b0:·222d·4620·6172·6368·3d62·3634·2220·666f··"-F·arch=b64"·fo | ||
| 000006c0:· | 000006c0:·726d·206f·6620·7468·6973·2072·756c·6520··rm·of·this·rule· | ||
| 000006d0:·3 | 000006d0:·6973·206e·6f74·2065·7870·6563·7465·640a··is·not·expected. | ||
| 000006e0:·74 | 000006e0:·746f·2062·6520·6465·6669·6e65·6420·6f6e··to·be·defined·on | ||
| 000006f0:· | 000006f0:·2036·3420·6269·7420·7379·7374·656d·7320···64·bit·systems· | ||
| 00000700:· | 00000700:·2874·6865·2061·666f·7265·6d65·6e74·696f··(the·aforementio | ||
| 00000710:· | 00000710:·6e65·6420·222d·4620·6172·6368·3d62·3332··ned·"-F·arch=b32 | ||
| 00000720:· | 00000720:·2220·7374·696d·6520·7275·6c65·0a66·6f72··"·stime·rule.for | ||
| 00000730:·6 | 00000730:·6d20·6974·7365·6c66·2069·7320·7375·6666··m·itself·is·suff | ||
| 00000740:·6 | 00000740:·6963·6965·6e74·2066·6f72·2062·6f74·6820··icient·for·both· | ||
| 00000750:· | 00000750:·3332·2062·6974·2061·6e64·2036·3420·6269··32·bit·and·64·bi | ||
| 00000760:· | 00000760:·7420·7379·7374·656d·7329·2e20·4966·2074··t·systems).·If·t | ||
| 00000770:·6 | 00000770:·6865·0a3c·7474·3e61·7564·6974·643c·2f74··he.<tt>auditd</t | ||
| 00000780:· | 00000780:·743e·2064·6165·6d6f·6e20·6973·2063·6f6e··t>·daemon·is·con | ||
| 00000790:· | 00000790:·6669·6775·7265·6420·746f·2075·7365·2074··figured·to·use·t | ||
| 000007a0:·6 | 000007a0:·6865·203c·7474·3e61·7564·6974·6374·6c3c··he·<tt>auditctl< | ||
| 000007b0:· | 000007b0:·2f74·743e·2075·7469·6c69·7479·2074·6f0a··/tt>·utility·to. | ||
| 000007c0:· | 000007c0:·7265·6164·2061·7564·6974·2072·756c·6573··read·audit·rules | ||
| 000007d0:·75 | 000007d0:·2064·7572·696e·6720·6461·656d·6f6e·2073···during·daemon·s | ||
| 000007e0:· | 000007e0:·7461·7274·7570·2c20·6164·6420·7468·6520··tartup,·add·the· | ||
| 000007f0:·6 | 000007f0:·666f·6c6c·6f77·696e·6720·6c69·6e65·2074··following·line·t | ||
| 00000800:· | 00000800:·6f0a·3c74·743e·2f65·7463·2f61·7564·6974··o.<tt>/etc/audit | ||
| 00000810:·2 | 00000810:·2f61·7564·6974·2e72·756c·6573·3c2f·7474··/audit.rules</tt | ||
| 00000820:· | 00000820:·3e20·6669·6c65·2066·6f72·2062·6f74·6820··>·file·for·both· | ||
| 00000830:· | 00000830:·3332·2062·6974·2061·6e64·2036·3420·6269··32·bit·and·64·bi | ||
| 00000840:· | 00000840:·7420·7379·7374·656d·733a·0a3c·7072·653e··t·systems:.<pre> | ||
| 00000850:·6 | 00000850:·2d61·2061·6c77·6179·732c·6578·6974·202d··-a·always,exit·- | ||
| 00000860:· | 00000860:·4620·6172·6368·3d62·3332·202d·5320·7374··F·arch=b32·-S·st | ||
| 00000870:· | 00000870:·696d·6520·2d46·206b·6579·3d61·7564·6974··ime·-F·key=audit | ||
| 00000880:· | 00000880:·5f74·696d·655f·7275·6c65·733c·2f70·7265··_time_rules</pre | ||
| 00000890:· | 00000890:·3e0a·5369·6e63·6520·7468·6520·3634·2062··>.Since·the·64·b | ||
| 000008a0:· | 000008a0:·6974·2076·6572·7369·6f6e·206f·6620·7468··it·version·of·th | ||
| 000008b0:·6 | 000008b0:·6520·2273·7469·6d65·2220·7379·7374·656d··e·"stime"·system | ||
| 000008c0:· | 000008c0:·2063·616c·6c20·6973·206e·6f74·2064·6566···call·is·not·def | ||
| 000008d0:·6 | 000008d0:·696e·6564·2069·6e20·7468·6520·6175·6469··ined·in·the·audi | ||
| 000008e0:· | 000008e0:·740a·6c6f·6f6b·7570·2074·6162·6c65·2c20··t.lookup·table,· | ||
| 000008f0:· | 000008f0:·7468·6520·636f·7272·6573·706f·6e64·696e··the·correspondin | ||
| 00000900:·6 | 00000900:·6720·222d·4620·6172·6368·3d62·3634·2220··g·"-F·arch=b64"· | ||
| 00000910:·666 | 00000910:·666f·726d·206f·6620·7468·6973·2072·756c··form·of·this·rul | ||
| 00000920:·6 | 00000920:·6520·6973·206e·6f74·2065·7870·6563·7465··e·is·not·expecte | ||
| 00000930:· | 00000930:·640a·746f·2062·6520·6465·6669·6e65·6420··d.to·be·defined· | ||
| 00000940:·6 | 00000940:·6f6e·2036·3420·6269·7420·7379·7374·656d··on·64·bit·system | ||
| 00000950:·7 | 00000950:·7320·2874·6865·2061·666f·7265·6d65·6e74··s·(the·aforement | ||
| 00000960:· | 00000960:·696f·6e65·6420·222d·4620·6172·6368·3d62··ioned·"-F·arch=b | ||
| 00000970:· | 00000970:·3332·2220·7374·696d·6520·7275·6c65·0a66··32"·stime·rule.f | ||
| 00000980:· | 00000980:·6f72·6d20·6974·7365·6c66·2069·7320·7375··orm·itself·is·su | ||
| 00000990:· | 00000990:·6666·6963·6965·6e74·2066·6f72·2062·6f74··fficient·for·bot | ||
| 000009a0:· | 000009a0:·6820·3332·2062·6974·2061·6e64·2036·3420··h·32·bit·and·64· | ||
| 000009b0:·6 | 000009b0:·6269·7420·7379·7374·656d·7329·2e20·5468··bit·systems).·Th | ||
| 000009c0:· | 000009c0:·6520·2d6b·206f·7074·696f·6e0a·616c·6c6f··e·-k·option.allo | ||
| 000009d0:· | 000009d0:·7773·2066·6f72·2074·6865·2073·7065·6369··ws·for·the·speci | ||
| 000009e0:· | 000009e0:·6669·6361·7469·6f6e·206f·6620·6120·6b65··fication·of·a·ke | ||
| 000009f0:· | 000009f0:·7920·696e·2073·7472·696e·6720·666f·726d··y·in·string·form | ||
| 00000a00:· | 00000a00:·2074·6861·7420·6361·6e20·6265·2075·7365···that·can·be·use | ||
| 00000a10:· | 00000a10:·6420·666f·720a·6265·7474·6572·2072·6570··d·for.better·rep | ||
| 00000a20:· | 00000a20:·6f72·7469·6e67·2063·6170·6162·696c·6974··orting·capabilit | ||
| 00000a30:·2074 | 00000a30:·7920·7468·726f·7567·6820·6175·7365·6172··y·through·ausear | ||
| 00000a40:·6 | 00000a40:·6368·2061·6e64·2061·7572·6570·6f72·742e··ch·and·aureport. | ||
| 00000a50:· | 00000a50:·204d·756c·7469·706c·6520·7379·7374·656d···Multiple·system | ||
| 00000a60:· | 00000a60:·0a63·616c·6c73·2063·616e·2062·6520·6465··.calls·can·be·de | ||
| 00000a70:·6 | 00000a70:·6669·6e65·6420·6f6e·2074·6865·2073·616d··fined·on·the·sam | ||
| 00000a80:·6 | 00000a80:·6520·6c69·6e65·2074·6f20·7361·7665·2073··e·line·to·save·s | ||
| 00000a90:·7 | 00000a90:·7061·6365·2069·6620·6465·7369·7265·642c··pace·if·desired, | ||
| 00000aa0:· | 00000aa0:·2062·7574·2069·7320·6e6f·740a·7265·7175···but·is·not.requ | ||
| 00000ab0:·756 | 00000ab0:·6972·6564·2e20·5365·6520·616e·2065·7861··ired.·See·an·exa | ||
| 00000ac0:· | 00000ac0:·6d70·6c65·206f·6620·6d75·6c74·6970·6c65··mple·of·multiple | ||
| 00000ad0:·20 | 00000ad0:·2063·6f6d·6269·6e65·6420·7379·7374·656d···combined·system | ||
| 00000ae0:· | 00000ae0:·2063·616c·6c73·3a0a·3c70·7265·3e2d·6120···calls:.<pre>-a· | ||
| 00000af0:·6 | 00000af0:·616c·7761·7973·2c65·7869·7420·2d46·2061··always,exit·-F·a | ||
| 00000b00:· | 00000b00:·7263·683d·6236·3420·2d53·2061·646a·7469··rch=b64·-S·adjti | ||
| 00000b10:· | 00000b10:·6d65·782c·7365·7474·696d·656f·6664·6179··mex,settimeofday | ||
| 00000b20:· | 00000b20:·202d·4620·6b65·793d·6175·6469·745f·7469···-F·key=audit_ti | ||
| 00000b30:·6 | 00000b30:·6d65·5f72·756c·6573·3c2f·7072·653e·0a20··me_rules</pre>.· | ||
| 00000b40:· | 00000b40:·2020·2020·203c·2f74·643e·0a20·2020·2020·······</td>.····· | ||
| 00000b50:· | 00000b50:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | ||
| 00000b60:·6 | 00000b60:·6e2d·5553·223e·0a20·2020·2020·2020·2041··n-US">.········A | ||
| 00000b70:· | 00000b70:·7262·6974·7261·7279·2063·6861·6e67·6573··rbitrary·changes | ||
| 00000b80:·206 | 00000b80:·2074·6f20·7468·6520·7379·7374·656d·2074···to·the·system·t | ||
| 00000b90:·6 | 00000b90:·696d·6520·6361·6e20·6265·2075·7365·6420··ime·can·be·used· | ||
| 00000ba0:·7 | 00000ba0:·746f·206f·6266·7573·6361·7465·0a6e·6566··to·obfuscate.nef | ||
| 00000bb0:·6 | 00000bb0:·6172·696f·7573·2061·6374·6976·6974·6965··arious·activitie | ||
| 00000bc0:· | 00000bc0:·7320·696e·206c·6f67·2066·696c·6573·2c20··s·in·log·files,· | ||
| 00000bd0:·6 | 00000bd0:·6173·2077·656c·6c20·6173·2074·6f20·636f··as·well·as·to·co | ||
| 00000be0:· | 00000be0:·6e66·7573·6520·6e65·7477·6f72·6b20·7365··nfuse·network·se | ||
| Max diff block lines reached; 6722787/7241141 bytes (92.84%) of diff not shown. | |||
| Offset 41, 60 lines modified | Offset 41, 46 lines modified | ||
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>Req-1.3</td> | 47 | ······<td>Req-1.3</td> |
| 48 | ······<td>Set·configuration·for· | 48 | ······<td>Set·configuration·for·loopback·traffic</td> |
| 49 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 50 | ········Configure·the·loopback·interface·to·accept·traffic. | 50 | ········Configure·the·loopback·interface·to·accept·traffic. |
| 51 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | 51 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback |
| 52 | network. | 52 | network. |
| 53 | ······</td> | 53 | ······</td> |
| 54 | ······<td·xml:lang="en-US"> | 54 | ······<td·xml:lang="en-US"> |
| 55 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | 55 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is |
| 56 | typically·critical·to·operation·of·the·system.·The·loopback·interface | 56 | typically·critical·to·operation·of·the·system.·The·loopback·interface |
| 57 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 57 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 58 | 58 | other·interfaces·should·ignore·traffic·on·this·network·as·an | |
| 59 | anti-spoofing·measure. | 59 | anti-spoofing·measure. |
| 60 | ······</td> | 60 | ······</td> |
| 61 | ····</tr> | 61 | ····</tr> |
| 62 | ····<tr> | 62 | ····<tr> |
| 63 | ······<td>Req-1.3</td> | 63 | ······<td>Req-1.3</td> |
| 64 | ······<td>Set·configuration·for·loopback·traffic</td> | 64 | ······<td>Set·configuration·for·IPv6·loopback·traffic</td> |
| 65 | ······<td·xml:lang="en-US"> | 65 | ······<td·xml:lang="en-US"> |
| 66 | ········Configure·the·loopback·interface·to·accept·traffic. | 66 | ········Configure·the·loopback·interface·to·accept·traffic. |
| 67 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | 67 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback |
| 68 | network. | 68 | network. |
| 69 | ······</td> | 69 | ······</td> |
| 70 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 71 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | 71 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is |
| 72 | typically·critical·to·operation·of·the·system.·The·loopback·interface | 72 | typically·critical·to·operation·of·the·system.·The·loopback·interface |
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen, |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 95 | ······<td·xml:lang="en-US"> | 81 | ······<td·xml:lang="en-US"> |
| 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 98 | GRUB2·command·line·for·the·Linux·operating·system. | 84 | GRUB2·command·line·for·the·Linux·operating·system. |
| 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 105, 14 lines modified | Offset 91, 28 lines modified | ||
| 105 | ······</td> | 91 | ······</td> |
| 106 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 108 | the·vulnerability·to·exploitation. | 94 | the·vulnerability·to·exploitation. |
| 109 | ······</td> | 95 | ······</td> |
| 110 | ····</tr> | 96 | ····</tr> |
| 111 | ····<tr> | 97 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 14 lines modified | Offset 157, 28 lines modified | ||
| 157 | ······<td·xml:lang="en-US"> | 157 | ······<td·xml:lang="en-US"> |
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all |
| 159 | packets·to·these·ports. | 159 | packets·to·these·ports. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td>Install·iptables·Package</td> | ||
| 165 | ······<td·xml:lang="en-US"> | ||
| 166 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 167 | <pre> | ||
| 168 | $·sudo·yum·install·iptables</pre> | ||
| 169 | ······</td> | ||
| 170 | ······<td·xml:lang="en-US"> | ||
| 171 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 172 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 173 | masquerading,·etc. | ||
| 174 | ······</td> | ||
| 175 | ····</tr> | ||
| 176 | ····<tr> | ||
| 177 | ······<td>Req-1.4.1</td> | ||
| 164 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 178 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 165 | ······<td·xml:lang="en-US"> | 179 | ······<td·xml:lang="en-US"> |
| 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 180 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| 167 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | 181 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> |
| 168 | ······</td> | 182 | ······</td> |
| 169 | ······<td·xml:lang="en-US"> | 183 | ······<td·xml:lang="en-US"> |
| 170 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | 184 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a |
| Offset 173, 28 lines modified | Offset 187, 14 lines modified | ||
| 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 187 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 188 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 175 | enables·the·system·to·continue·servicing·valid·connection·requests. | 189 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 176 | ······</td> | 190 | ······</td> |
| 177 | ····</tr> | 191 | ····</tr> |
| 178 | ····<tr> | 192 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 193 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Install·iptables·Package</td> | ||
| Max diff block lines reached; 306446/312827 bytes (97.96%) of diff not shown. | |||
| Offset 8, 15 lines modified | Offset 8, 15 lines modified | ||
| 8 | ····················································································generated·between | 8 | ····················································································generated·between |
| 9 | ····················································································processes·on | 9 | ····················································································processes·on |
| 10 | ····················································································machine·and·is | 10 | ····················································································machine·and·is |
| 11 | ····················································································typically·critical | 11 | ····················································································typically·critical |
| 12 | ····················································································to·operation·of·the | 12 | ····················································································to·operation·of·the |
| 13 | ····················································································system.·The | 13 | ····················································································system.·The |
| 14 | ·········Set·configuration···Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | 14 | ·········Set·configuration···Configure·the·loopback·interface·to·accept·traffic.····loopback·interface |
| 15 | Req-1.3··for· | 15 | Req-1.3··for·loopback········Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place |
| 16 | ·········traffic·············loopback·network.······································that·loopback | 16 | ·········traffic·············loopback·network.······································that·loopback |
| 17 | ····················································································network·traffic | 17 | ····················································································network·traffic |
| 18 | ····················································································should·be·seen,·all | 18 | ····················································································should·be·seen,·all |
| 19 | ····················································································other·interfaces | 19 | ····················································································other·interfaces |
| 20 | ····················································································should·ignore | 20 | ····················································································should·ignore |
| 21 | ····················································································traffic·on·this | 21 | ····················································································traffic·on·this |
| 22 | ····················································································network·as·an·anti- | 22 | ····················································································network·as·an·anti- |
| Offset 25, 23 lines modified | Offset 25, 35 lines modified | ||
| 25 | ····················································································generated·between | 25 | ····················································································generated·between |
| 26 | ····················································································processes·on | 26 | ····················································································processes·on |
| 27 | ····················································································machine·and·is | 27 | ····················································································machine·and·is |
| 28 | ····················································································typically·critical | 28 | ····················································································typically·critical |
| 29 | ····················································································to·operation·of·the | 29 | ····················································································to·operation·of·the |
| 30 | ····················································································system.·The | 30 | ····················································································system.·The |
| 31 | ·········Set·configuration···Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | 31 | ·········Set·configuration···Configure·the·loopback·interface·to·accept·traffic.····loopback·interface |
| 32 | Req-1.3··for·loopback | 32 | Req-1.3··for·IPv6·loopback···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place |
| 33 | ·········traffic·············loopback·network.······································that·loopback | 33 | ·········traffic·············loopback·network.······································that·loopback |
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 41 | ····················································································Routing·protocol | 53 | ····················································································Routing·protocol |
| 42 | ····················································································daemons·are | 54 | ····················································································daemons·are |
| 43 | ····················································································typically·used·on | 55 | ····················································································typically·used·on |
| 44 | ····················································································routers·to·exchange | 56 | ····················································································routers·to·exchange |
| 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 49, 26 lines modified | Offset 61, 14 lines modified | ||
| 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 50 | ·····························sysctl.d:··············································required,·system | 62 | ·····························sysctl.d:··············································required,·system |
| 51 | ·····························net.ipv4.ip_forward·=·0································network·information | 63 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 52 | ····················································································may·be | 64 | ····················································································may·be |
| 53 | ····················································································unnecessarily | 65 | ····················································································unnecessarily |
| 54 | ····················································································transmitted·across | 66 | ····················································································transmitted·across |
| 55 | ····················································································the·network. | 67 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 14 lines modified | Offset 112, 23 lines modified | ||
| 112 | ····················································································Without·a·firewall | 112 | ····················································································Without·a·firewall |
| 113 | ····················································································rule·configured·for | 113 | ····················································································rule·configured·for |
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default |
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy |
| 116 | ·········open·ports·································································will·drop·all | 116 | ·········open·ports·································································will·drop·all |
| 117 | ····················································································packets·to·these | 117 | ····················································································packets·to·these |
| 118 | ····················································································ports. | 118 | ····················································································ports. |
| 119 | ····················································································iptables·controls | ||
| 120 | ····················································································the·Linux·kernel | ||
| 121 | ····················································································network·packet | ||
| 122 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 123 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 124 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 125 | ····················································································set·up·firewalls | ||
| 126 | ····················································································and·IP | ||
| 127 | ····················································································masquerading,·etc. | ||
| 119 | ····················································································A·TCP·SYN·flood | 128 | ····················································································A·TCP·SYN·flood |
| 120 | ····················································································attack·can·cause·a | 129 | ····················································································attack·can·cause·a |
| 121 | ····················································································denial·of·service | 130 | ····················································································denial·of·service |
| 122 | ····················································································by·filling·a | 131 | ····················································································by·filling·a |
| 123 | ····················································································system's·TCP | 132 | ····················································································system's·TCP |
| 124 | ····················································································connection·table | 133 | ····················································································connection·table |
| 125 | ····················································································with·connections·in | 134 | ····················································································with·connections·in |
| Offset 138, 23 lines modified | Offset 147, 14 lines modified | ||
| 138 | ····················································································flood·condition·is | 147 | ····················································································flood·condition·is |
| 139 | ····················································································detected,·and | 148 | ····················································································detected,·and |
| 140 | ····················································································enables·the·system | 149 | ····················································································enables·the·system |
| 141 | ····················································································to·continue | 150 | ····················································································to·continue |
| 142 | ····················································································servicing·valid | 151 | ····················································································servicing·valid |
| 143 | ····················································································connection | 152 | ····················································································connection |
| 144 | ····················································································requests. | 153 | ····················································································requests. |
| 145 | ····················································································iptables·controls | ||
| 146 | ····················································································the·Linux·kernel | ||
| 147 | ····················································································network·packet | ||
| 148 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 149 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 150 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 151 | ····················································································set·up·firewalls | ||
| 152 | ····················································································and·IP | ||
| 153 | ····················································································masquerading,·etc. | ||
| 154 | ····················································································Loopback·traffic·is | 154 | ····················································································Loopback·traffic·is |
| 155 | ····················································································generated·between | 155 | ····················································································generated·between |
| 156 | ····················································································processes·on | 156 | ····················································································processes·on |
| 157 | ····················································································machine·and·is | 157 | ····················································································machine·and·is |
| 158 | ····················································································typically·critical | 158 | ····················································································typically·critical |
| 159 | ····················································································to·operation·of·the | 159 | ····················································································to·operation·of·the |
| 160 | ····················································································system.·The | 160 | ····················································································system.·The |
| Offset 187, 14 lines modified | Offset 187, 48 lines modified | ||
| Max diff block lines reached; 499899/512347 bytes (97.57%) of diff not shown. | |||
| Offset 69, 14236 lines modified | Offset 69, 14236 lines modified | ||
| 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | ||
| 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | ||
| 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | ||
| 00000470:·3c74·643e·4155·2d32·2864·293c·6272·2f3e··<td>AU-2(d)<br/> | 00000470:·3c74·643e·4155·2d32·2864·293c·6272·2f3e··<td>AU-2(d)<br/> | ||
| 00000480:·4155·2d31·3228·6329·3c62·722f·3e41·432d··AU-12(c)<br/>AC- | 00000480:·4155·2d31·3228·6329·3c62·722f·3e41·432d··AU-12(c)<br/>AC- | ||
| 00000490:·3628·3929·3c62·722f·3e43·4d2d·3628·6129··6(9)<br/>CM-6(a) | 00000490:·3628·3929·3c62·722f·3e43·4d2d·3628·6129··6(9)<br/>CM-6(a) | Diff chunk too large, falling back to line-by-line diff (2563 lines added, 2563 lines removed) | |
| 000004a0:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | 000004a0:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | ||
| 000004b0:· | 000004b0:·5265·636f·7264·2041·7474·656d·7074·7320··Record·Attempts· | ||
| 000004c0:· | 000004c0:·746f·2041·6c74·6572·2054·696d·6520·5468··to·Alter·Time·Th | ||
| 000004d0:· | 000004d0:·726f·7567·6820·7374·696d·653c·2f74·643e··rough·stime</td> | ||
| 000004e0:· | 000004e0:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 000004f0:·616e·6 | 000004f0:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000500:· | 00000500:·2020·2020·2049·6620·7468·6520·3c74·743e·······If·the·<tt> | ||
| 00000510:·61 | 00000510:·6175·6469·7464·3c2f·7474·3e20·6461·656d··auditd</tt>·daem | ||
| 00000520:· | 00000520:·6f6e·2069·7320·636f·6e66·6967·7572·6564··on·is·configured | ||
| 00000530:· | 00000530:·2074·6f20·7573·6520·7468·650a·3c74·743e···to·use·the.<tt> | ||
| 00000540:·7 | 00000540:·6175·6765·6e72·756c·6573·3c2f·7474·3e20··augenrules</tt>· | ||
| 00000550:· | 00000550:·7072·6f67·7261·6d20·746f·2072·6561·6420··program·to·read· | ||
| 00000560:· | 00000560:·6175·6469·7420·7275·6c65·7320·6475·7269··audit·rules·duri | ||
| 00000570:·6 | 00000570:·6e67·2064·6165·6d6f·6e20·7374·6172·7475··ng·daemon·startu | ||
| 00000580:·7 | 00000580:·7020·2874·6865·0a64·6566·6175·6c74·292c··p·(the.default), | ||
| 00000590:· | 00000590:·2061·6464·2074·6865·2066·6f6c·6c6f·7769···add·the·followi | ||
| 000005a0:·6 | 000005a0:·6e67·206c·696e·6520·746f·2061·2066·696c··ng·line·to·a·fil | ||
| 000005b0:· | 000005b0:·6520·7769·7468·2073·7566·6669·7820·3c74··e·with·suffix·<t | ||
| 000005c0:·7 | 000005c0:·743e·2e72·756c·6573·3c2f·7474·3e20·696e··t>.rules</tt>·in | ||
| 000005d0:· | 000005d0:·2074·6865·0a64·6972·6563·746f·7279·203c···the.directory·< | ||
| 000005e0:· | 000005e0:·7474·3e2f·6574·632f·6175·6469·742f·7275··tt>/etc/audit/ru | ||
| 000005f0:· | 000005f0:·6c65·732e·643c·2f74·743e·2066·6f72·2062··les.d</tt>·for·b | ||
| 00000600:·6 | 00000600:·6f74·6820·3332·2062·6974·2061·6e64·2036··oth·32·bit·and·6 | ||
| 00000610:· | 00000610:·3420·6269·7420·7379·7374·656d·733a·0a3c··4·bit·systems:.< | ||
| 00000620:· | 00000620:·7072·653e·2d61·2061·6c77·6179·732c·6578··pre>-a·always,ex | ||
| 00000630:·6 | 00000630:·6974·202d·4620·6172·6368·3d62·3332·202d··it·-F·arch=b32·- | ||
| 00000640:· | 00000640:·5320·7374·696d·6520·2d46·206b·6579·3d61··S·stime·-F·key=a | ||
| 00000650:·697 | 00000650:·7564·6974·5f74·696d·655f·7275·6c65·733c··udit_time_rules< | ||
| 00000660:· | 00000660:·2f70·7265·3e0a·5369·6e63·6520·7468·6520··/pre>.Since·the· | ||
| 00000670:· | 00000670:·3634·2062·6974·2076·6572·7369·6f6e·206f··64·bit·version·o | ||
| 00000680:·6 | 00000680:·6620·7468·6520·2273·7469·6d65·2220·7379··f·the·"stime"·sy | ||
| 00000690:· | 00000690:·7374·656d·2063·616c·6c20·6973·206e·6f74··stem·call·is·not | ||
| 000006a0:·65 | 000006a0:·2064·6566·696e·6564·2069·6e20·7468·6520···defined·in·the· | ||
| 000006b0:· | 000006b0:·6175·6469·740a·6c6f·6f6b·7570·2074·6162··audit.lookup·tab | ||
| 000006c0:· | 000006c0:·6c65·2c20·7468·6520·636f·7272·6573·706f··le,·the·correspo | ||
| 000006d0:· | 000006d0:·6e64·696e·6720·222d·4620·6172·6368·3d62··nding·"-F·arch=b | ||
| 000006e0:· | 000006e0:·3634·2220·666f·726d·206f·6620·7468·6973··64"·form·of·this | ||
| 000006f0:· | 000006f0:·2072·756c·6520·6973·206e·6f74·2065·7870···rule·is·not·exp | ||
| 00000700:· | 00000700:·6563·7465·640a·746f·2062·6520·6465·6669··ected.to·be·defi | ||
| 00000710:· | 00000710:·6e65·6420·6f6e·2036·3420·6269·7420·7379··ned·on·64·bit·sy | ||
| 00000720:· | 00000720:·7374·656d·7320·2874·6865·2061·666f·7265··stems·(the·afore | ||
| 00000730:· | 00000730:·6d65·6e74·696f·6e65·6420·222d·4620·6172··mentioned·"-F·ar | ||
| 00000740:· | 00000740:·6368·3d62·3332·2220·7374·696d·6520·7275··ch=b32"·stime·ru | ||
| 00000750:· | 00000750:·6c65·0a66·6f72·6d20·6974·7365·6c66·2069··le.form·itself·i | ||
| 00000760:·7320· | 00000760:·7320·7375·6666·6963·6965·6e74·2066·6f72··s·sufficient·for | ||
| 00000770:· | 00000770:·2062·6f74·6820·3332·2062·6974·2061·6e64···both·32·bit·and | ||
| 00000780:· | 00000780:·2036·3420·6269·7420·7379·7374·656d·7329···64·bit·systems) | ||
| 00000790:· | 00000790:·2e20·4966·2074·6865·0a3c·7474·3e61·7564··.·If·the.<tt>aud | ||
| 000007a0:· | 000007a0:·6974·643c·2f74·743e·2064·6165·6d6f·6e20··itd</tt>·daemon· | ||
| 000007b0:· | 000007b0:·6973·2063·6f6e·6669·6775·7265·6420·746f··is·configured·to | ||
| 000007c0:· | 000007c0:·2075·7365·2074·6865·203c·7474·3e61·7564···use·the·<tt>aud | ||
| 000007d0:· | 000007d0:·6974·6374·6c3c·2f74·743e·2075·7469·6c69··itctl</tt>·utili | ||
| 000007e0:· | 000007e0:·7479·2074·6f0a·7265·6164·2061·7564·6974··ty·to.read·audit | ||
| 000007f0:·7 | 000007f0:·2072·756c·6573·2064·7572·696e·6720·6461···rules·during·da | ||
| 00000800:· | 00000800:·656d·6f6e·2073·7461·7274·7570·2c20·6164··emon·startup,·ad | ||
| 00000810:· | 00000810:·6420·7468·6520·666f·6c6c·6f77·696e·6720··d·the·following· | ||
| 00000820:·6 | 00000820:·6c69·6e65·2074·6f0a·3c74·743e·2f65·7463··line·to.<tt>/etc | ||
| 00000830:· | 00000830:·2f61·7564·6974·2f61·7564·6974·2e72·756c··/audit/audit.rul | ||
| 00000840:· | 00000840:·6573·3c2f·7474·3e20·6669·6c65·2066·6f72··es</tt>·file·for | ||
| 00000850:· | 00000850:·2062·6f74·6820·3332·2062·6974·2061·6e64···both·32·bit·and | ||
| 00000860:·20 | 00000860:·2036·3420·6269·7420·7379·7374·656d·733a···64·bit·systems: | ||
| 00000870:· | 00000870:·0a3c·7072·653e·2d61·2061·6c77·6179·732c··.<pre>-a·always, | ||
| 00000880:· | 00000880:·6578·6974·202d·4620·6172·6368·3d62·3332··exit·-F·arch=b32 | ||
| 00000890:· | 00000890:·202d·5320·7374·696d·6520·2d46·206b·6579···-S·stime·-F·key | ||
| 000008a0:· | 000008a0:·3d61·7564·6974·5f74·696d·655f·7275·6c65··=audit_time_rule | ||
| 000008b0:·7 | 000008b0:·733c·2f70·7265·3e0a·5369·6e63·6520·7468··s</pre>.Since·th | ||
| 000008c0:· | 000008c0:·6520·3634·2062·6974·2076·6572·7369·6f6e··e·64·bit·version | ||
| 000008d0:· | 000008d0:·206f·6620·7468·6520·2273·7469·6d65·2220···of·the·"stime"· | ||
| 000008e0:· | 000008e0:·7379·7374·656d·2063·616c·6c20·6973·206e··system·call·is·n | ||
| 000008f0:·6 | 000008f0:·6f74·2064·6566·696e·6564·2069·6e20·7468··ot·defined·in·th | ||
| 00000900:· | 00000900:·6520·6175·6469·740a·6c6f·6f6b·7570·2074··e·audit.lookup·t | ||
| 00000910:·616 | 00000910:·6162·6c65·2c20·7468·6520·636f·7272·6573··able,·the·corres | ||
| 00000920:· | 00000920:·706f·6e64·696e·6720·222d·4620·6172·6368··ponding·"-F·arch | ||
| 00000930:· | 00000930:·3d62·3634·2220·666f·726d·206f·6620·7468··=b64"·form·of·th | ||
| 00000940:·6 | 00000940:·6973·2072·756c·6520·6973·206e·6f74·2065··is·rule·is·not·e | ||
| 00000950:· | 00000950:·7870·6563·7465·640a·746f·2062·6520·6465··xpected.to·be·de | ||
| 00000960:· | 00000960:·6669·6e65·6420·6f6e·2036·3420·6269·7420··fined·on·64·bit· | ||
| 00000970:· | 00000970:·7379·7374·656d·7320·2874·6865·2061·666f··systems·(the·afo | ||
| 00000980:· | 00000980:·7265·6d65·6e74·696f·6e65·6420·222d·4620··rementioned·"-F· | ||
| 00000990:·617 | 00000990:·6172·6368·3d62·3332·2220·7374·696d·6520··arch=b32"·stime· | ||
| 000009a0:· | 000009a0:·7275·6c65·0a66·6f72·6d20·6974·7365·6c66··rule.form·itself | ||
| 000009b0:· | 000009b0:·2069·7320·7375·6666·6963·6965·6e74·2066···is·sufficient·f | ||
| 000009c0:· | 000009c0:·6f72·2062·6f74·6820·3332·2062·6974·2061··or·both·32·bit·a | ||
| 000009d0:·6 | 000009d0:·6e64·2036·3420·6269·7420·7379·7374·656d··nd·64·bit·system | ||
| 000009e0:· | 000009e0:·7329·2e20·5468·6520·2d6b·206f·7074·696f··s).·The·-k·optio | ||
| 000009f0:· | 000009f0:·6e0a·616c·6c6f·7773·2066·6f72·2074·6865··n.allows·for·the | ||
| 00000a00:· | 00000a00:·2073·7065·6369·6669·6361·7469·6f6e·206f···specification·o | ||
| 00000a10:·6 | 00000a10:·6620·6120·6b65·7920·696e·2073·7472·696e··f·a·key·in·strin | ||
| 00000a20:·6 | 00000a20:·6720·666f·726d·2074·6861·7420·6361·6e20··g·form·that·can· | ||
| 00000a30:·6 | 00000a30:·6265·2075·7365·6420·666f·720a·6265·7474··be·used·for.bett | ||
| 00000a40:·6 | 00000a40:·6572·2072·6570·6f72·7469·6e67·2063·6170··er·reporting·cap | ||
| 00000a50:· | 00000a50:·6162·696c·6974·7920·7468·726f·7567·6820··ability·through· | ||
| 00000a60:·6 | 00000a60:·6175·7365·6172·6368·2061·6e64·2061·7572··ausearch·and·aur | ||
| 00000a70:·6 | 00000a70:·6570·6f72·742e·204d·756c·7469·706c·6520··eport.·Multiple· | ||
| 00000a80:·73 | 00000a80:·7379·7374·656d·0a63·616c·6c73·2063·616e··system.calls·can | ||
| 00000a90:·206 | 00000a90:·2062·6520·6465·6669·6e65·6420·6f6e·2074···be·defined·on·t | ||
| 00000aa0:· | 00000aa0:·6865·2073·616d·6520·6c69·6e65·2074·6f20··he·same·line·to· | ||
| 00000ab0:· | 00000ab0:·7361·7665·2073·7061·6365·2069·6620·6465··save·space·if·de | ||
| 00000ac0:· | 00000ac0:·7369·7265·642c·2062·7574·2069·7320·6e6f··sired,·but·is·no | ||
| 00000ad0:·7 | 00000ad0:·740a·7265·7175·6972·6564·2e20·5365·6520··t.required.·See· | ||
| 00000ae0:· | 00000ae0:·616e·2065·7861·6d70·6c65·206f·6620·6d75··an·example·of·mu | ||
| 00000af0:· | 00000af0:·6c74·6970·6c65·2063·6f6d·6269·6e65·6420··ltiple·combined· | ||
| 00000b00:· | 00000b00:·7379·7374·656d·2063·616c·6c73·3a0a·3c70··system·calls:.<p | ||
| 00000b10:· | 00000b10:·7265·3e2d·6120·616c·7761·7973·2c65·7869··re>-a·always,exi | ||
| 00000b20:· | 00000b20:·7420·2d46·2061·7263·683d·6236·3420·2d53··t·-F·arch=b64·-S | ||
| 00000b30:·2 | 00000b30:·2061·646a·7469·6d65·782c·7365·7474·696d···adjtimex,settim | ||
| 00000b40:· | 00000b40:·656f·6664·6179·202d·4620·6b65·793d·6175··eofday·-F·key=au | ||
| 00000b50:· | 00000b50:·6469·745f·7469·6d65·5f72·756c·6573·3c2f··dit_time_rules</ | ||
| 00000b60:· | 00000b60:·7072·653e·0a20·2020·2020·203c·2f74·643e··pre>.······</td> | ||
| 00000b70:· | 00000b70:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000b80:· | 00000b80:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000b90:· | 00000b90:·2020·2020·2041·7262·6974·7261·7279·2063·······Arbitrary·c | ||
| 00000ba0:· | 00000ba0:·6861·6e67·6573·2074·6f20·7468·6520·7379··hanges·to·the·sy | ||
| 00000bb0:·7465 | 00000bb0:·7374·656d·2074·696d·6520·6361·6e20·6265··stem·time·can·be | ||
| 00000bc0:· | 00000bc0:·2075·7365·6420·746f·206f·6266·7573·6361···used·to·obfusca | ||
| 00000bd0:· | 00000bd0:·7465·0a6e·6566·6172·696f·7573·2061·6374··te.nefarious·act | ||
| 00000be0:· | 00000be0:·6976·6974·6965·7320·696e·206c·6f67·2066··ivities·in·log·f | ||
| 00000bf0:· | 00000bf0:·696c·6573·2c20·6173·2077·656c·6c20·6173··iles,·as·well·as | ||
| 00000c00:· | 00000c00:·2074·6f20·636f·6e66·7573·6520·6e65·7477···to·confuse·netw | ||
| 00000c10:· | 00000c10:·6f72·6b20·7365·7276·6963·6573·2074·6861··ork·services·tha | ||
| Max diff block lines reached; 7274789/7629061 bytes (95.36%) of diff not shown. | |||
| Offset 64, 274 lines modified | Offset 64, 274 lines modified | ||
| 000003f0:·3c74·683e·5275·6c65·2054·6974·6c65·3c2f··<th>Rule·Title</ | 000003f0:·3c74·683e·5275·6c65·2054·6974·6c65·3c2f··<th>Rule·Title</ | ||
| 00000400:·7468·3e0a·2020·2020·3c74·683e·4465·7363··th>.····<th>Desc | 00000400:·7468·3e0a·2020·2020·3c74·683e·4465·7363··th>.····<th>Desc | ||
| 00000410:·7269·7074·696f·6e3c·2f74·683e·0a20·2020··ription</th>.··· | 00000410:·7269·7074·696f·6e3c·2f74·683e·0a20·2020··ription</th>.··· | ||
| 00000420:·203c·7468·3e52·6174·696f·6e61·6c65·3c2f···<th>Rationale</ | 00000420:·203c·7468·3e52·6174·696f·6e61·6c65·3c2f···<th>Rationale</ | ||
| 00000430:·7468·3e0a·2020·3c2f·7468·6561·643e·0a20··th>.··</thead>.· | 00000430:·7468·3e0a·2020·3c2f·7468·6561·643e·0a20··th>.··</thead>.· | ||
| 00000440:·203c·7462·6f64·793e·0a20·203c·7472·3e0a···<tbody>.··<tr>. | 00000440:·203c·7462·6f64·793e·0a20·203c·7472·3e0a···<tbody>.··<tr>. | ||
| 00000450:·2020·2020·2020·3c74·643e·5231·3c2f·7464········<td>R1</td | 00000450:·2020·2020·2020·3c74·643e·5231·3c2f·7464········<td>R1</td | ||
| 00000460:·3e0a·2020·2020·2020·3c74·643e·4 | 00000460:·3e0a·2020·2020·2020·3c74·643e·456e·7375··>.······<td>Ensu | ||
| 00000470:·7265·2053·4d41·5020·6973·206e·6f74·2064··re·SMAP·is·not·d | |||
| 00000480:·6973·6162·6c65·6420·6475·7269·6e67·2062··isabled·during·b | |||
| 00000470:·616c·6c20·5041·4520·4b65·726e·656c·206f··all·PAE·Kernel·o | |||
| 00000480:·6e20·5375·7070·6f72·7465·6420·3332·2d62··n·Supported·32-b | |||
| 00000490:·6974·2078·3836·2053·7973·7465·6d73·3c2f··it·x86·Systems</ | |||
| 000004a0:·7464·3e0a·2020·2020·2020·3c74·6420·786d··td>.······<td·xm | |||
| 000004b0:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | |||
| 000004c0:·2020·2020·2020·2020·5379·7374·656d·7320··········Systems· | |||
| 000004d0:·7468·6174·2061·7265·2075·7369·6e67·2074··that·are·using·t | |||
| 000004e0:·6865·2036·342d·6269·7420·7838·3620·6b65··he·64-bit·x86·ke | |||
| 000004f0:·726e·656c·2070·6163·6b61·6765·0a64·6f20··rnel·package.do· | |||
| 00000500:·6e6f·7420·6e65·6564·2074·6f20·696e·7374··not·need·to·inst | |||
| 00000510:·616c·6c20·7468·6520·6b65·726e·656c·2d50··all·the·kernel-P | |||
| 00000520:·4145·2070·6163·6b61·6765·2062·6563·6175··AE·package·becau | |||
| 00000530:·7365·2074·6865·2036·342d·6269·740a·7838··se·the·64-bit.x8 | |||
| 00000540:·3620·6b65·726e·656c·2061·6c72·6561·6479··6·kernel·already | |||
| 00000550:·2069·6e63·6c75·6465·7320·7468·6973·2073···includes·this·s | |||
| 00000560:·7570·706f·7274·2e20·486f·7765·7665·722c··upport.·However, | |||
| 00000570:·2069·6620·7468·6520·7379·7374·656d·2069···if·the·system·i | |||
| 00000580:·730a·3332·2d62·6974·2061·6e64·2061·6c73··s.32-bit·and·als | |||
| 00000590:·6f20·7375·7070·6f72·7473·2074·6865·2050··o·supports·the·P | |||
| 000005a0:·4145·2061·6e64·204e·5820·6665·6174·7572··AE·and·NX·featur | |||
| 000005b0:·6573·2061·730a·6465·7465·726d·696e·6564··es·as.determined | |||
| 000005c0:·2069·6e20·7468·6520·7072·6576·696f·7573···in·the·previous | |||
| 000005d0:·2073·6563·7469·6f6e·2c20·7468·6520·6b65···section,·the·ke | |||
| 000005e0:·726e·656c·2d50·4145·2070·6163·6b61·6765··rnel-PAE·package | |||
| 000005f0:·2073·686f·756c·640a·6265·2069·6e73·7461···should.be·insta | |||
| 00000600:·6c6c·6564·2074·6f20·656e·6162·6c65·2058··lled·to·enable·X | |||
| 00000610:·4420·6f72·204e·5820·7375·7070·6f72·742e··D·or·NX·support. | |||
| 00000620:·0a54·6865·203c·636f·6465·3e6b·6572·6e65··.The·<code>kerne | |||
| 00000630:·6c2d·5041·453c·2f63·6f64·653e·2070·6163··l-PAE</code>·pac | |||
| 00000640:·6b61·6765·2063·616e·2062·6520·696e·7374··kage·can·be·inst | |||
| 00000650:·616c·6c65·6420·7769·7468·2074·6865·2066··alled·with·the·f | |||
| 00000660:·6f6c·6c6f·7769·6e67·2063·6f6d·6d61·6e64··ollowing·command | |||
| 00000670:·3a0a·3c70·7265·3e0a·2420·7375·646f·2079··:.<pre>.$·sudo·y | |||
| 00000680:·756d·2069·6e73·7461·6c6c·206b·6572·6e65··um·install·kerne | |||
| 00000690:·6c2d·5041·453c·2f70·7265·3e0a·5468·6520··l-PAE</pre>.The· | |||
| 000006a0:·696e·7374·616c·6c61·7469·6f6e·2070·726f··installation·pro | |||
| 000006b0:·6365·7373·2073·686f·756c·6420·616c·736f··cess·should·also | |||
| 000006c0:·2068·6176·6520·636f·6e66·6967·7572·6564···have·configured | |||
| 000006d0:·2074·6865·0a62·6f6f·746c·6f61·6465·7220···the.bootloader· | |||
| 000006e0:·746f·206c·6f61·6420·7468·6520·6e65·7720··to·load·the·new· | |||
| 000006f0:·6b65·726e·656c·2061·7420·626f·6f74·2e20··kernel·at·boot.· | |||
| 00000700:·5665·7269·6679·2074·6869·7320·6166·7465··Verify·this·afte | |||
| 00000710:·7220·7265·626f·6f74·0a61·6e64·206d·6f64··r·reboot.and·mod | |||
| 00000720:·6966·7920·3c74·743e·2f65·7463·2f64·6566··ify·<tt>/etc/def | |||
| 00000730:·6175·6c74·2f67·7275·623c·2f74·743e·2069··ault/grub</tt>·i | |||
| 00000740:·6620·6e65·6365·7373·6172·792e·0a20·2020··f·necessary..··· | |||
| 00000 | 00000490:·6f6f·743c·2f74·643e·0a20·2020·2020·203c··oot</td>.······< | ||
| 00000 | 000004a0:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 00000 | 000004b0:·5553·223e·0a20·2020·2020·2020·2054·6865··US">.········The | ||
| 000004c0:·2053·4d41·5020·6973·2075·7365·6420·746f···SMAP·is·used·to | |||
| 000004d0:·2070·7265·7665·6e74·2074·6865·2073·7570···prevent·the·sup | |||
| 000004e0:·6572·7669·736f·7220·6d6f·6465·2066·726f··ervisor·mode·fro | |||
| 000004f0:·6d20·756e·696e·7465·6e74·696f·6e61·6c6c··m·unintentionall | |||
| 00000500:·7920·7265·6164·696e·672f·7772·6974·696e··y·reading/writin | |||
| 00000510:·6720·696e·746f·0a6d·656d·6f72·7920·7061··g·into.memory·pa | |||
| 00000520:·6765·7320·696e·2074·6865·2075·7365·7220··ges·in·the·user· | |||
| 00000780:·3332·2d62·6974·2073·7973·7465·6d73·2074··32-bit·systems·t | |||
| 00000790:·6861·7420·7375·7070·6f72·7420·7468·6520··hat·support·the· | |||
| 000007a0:·5844·206f·7220·4e58·2062·6974·2c20·7468··XD·or·NX·bit,·th | |||
| 000007b0:·6520·7665·6e64·6f72·2d73·7570·706c·6965··e·vendor-supplie | |||
| 000007c0:·640a·5041·4520·6b65·726e·656c·2069·7320··d.PAE·kernel·is· | |||
| 000007d0:·7265·7175·6972·6564·2074·6f20·656e·6162··required·to·enab | |||
| 000007e0:·6c65·2065·6974·6865·7220·4578·6563·7574··le·either·Execut | |||
| 000007f0:·6520·4469·7361·626c·6520·2858·4429·206f··e·Disable·(XD)·o | |||
| 00000800:·7220·4e6f·2045·7865·6375·7465·2028·4e58··r·No·Execute·(NX | |||
| 00000810:·2920·7375·7070·6f72·742e·0a20·2020·2020··)·support..····· | |||
| 00000820:·203c·2f74·643e·0a20·2020·203c·2f74·723e···</td>.····</tr> | |||
| 00000830:·0a20·2020·203c·7472·3e0a·2020·2020·2020··.····<tr>.······ | |||
| 00000840:·3c74·643e·5231·3c2f·7464·3e0a·2020·2020··<td>R1</td>.···· | |||
| 00000850:·2020·3c74·643e·456e·7375·7265·2053·4d45····<td>Ensure·SME | |||
| 00000860:·5020·6973·206e·6f74·2064·6973·6162·6c65··P·is·not·disable | |||
| 00000870:·6420·6475·7269·6e67·2062·6f6f·743c·2f74··d·during·boot</t | |||
| 00000880:·643e·0a20·2020·2020·203c·7464·2078·6d6c··d>.······<td·xml | |||
| 00000890:·3a6c·616e·673d·2265·6e2d·5553·223e·0a20··:lang="en-US">.· | |||
| 000008a0:·2020·2020·2020·2054·6865·2053·4d45·5020·········The·SMEP· | |||
| 000008b0:·6973·2075·7365·6420·746f·2070·7265·7665··is·used·to·preve | |||
| 000008c0:·6e74·2074·6865·2073·7570·6572·7669·736f··nt·the·superviso | |||
| 000008d0:·7220·6d6f·6465·2066·726f·6d20·6578·6563··r·mode·from·exec | |||
| 000008e0:·7574·696e·6720·7573·6572·2073·7061·6365··uting·user·space | |||
| 00000 | 00000530:·7370·6163·652c·2069·7420·6973·2065·6e61··space,·it·is·ena | ||
| 00000 | 00000540:·626c·6564·2062·7920·6465·6661·756c·7420··bled·by·default· | ||
| 00000 | 00000550:·7369·6e63·6520·4c69·6e75·7820·6b65·726e··since·Linux·kern | ||
| 00000 | 00000560:·656c·2033·2e37·2e0a·4275·7420·6974·2063··el·3.7..But·it·c | ||
| 00000 | 00000570:·6f75·6c64·2062·6520·6469·7361·626c·6564··ould·be·disabled | ||
| 00000 | 00000580:·2074·6872·6f75·6768·206b·6572·6e65·6c20···through·kernel· | ||
| 00000 | 00000590:·626f·6f74·2070·6172·616d·6574·6572·732e··boot·parameters. | ||
| 00000 | 000005a0:·0a0a·456e·7375·7265·2074·6861·7420·5375··..Ensure·that·Su | ||
| 00000 | 000005b0:·7065·7276·6973·6f72·204d·6f64·6520·4163··pervisor·Mode·Ac | ||
| 00000980:·6563·7574·696f·6e20·5072·6576·656e·7469··ecution·Preventi | |||
| 00000990:·6f6e·2028·534d·4550·2920·6973·206e·6f74··on·(SMEP)·is·not | |||
| 000009a0:·2064·6973·6162·6c65·6420·6279·0a74·6865···disabled·by.the | |||
| 000009b0:·203c·7474·3e6e·6f73·6d65·703c·2f74·743e···<tt>nosmep</tt> | |||
| 000009c0:·2062·6f6f·7420·7061·7261·6d65·6e74·6572···boot·paramenter | |||
| 000009d0:·206f·7074·696f·6e2e·0a0a·4368·6563·6b20···option...Check· | |||
| 000009e0:·7468·6174·2074·6865·206c·696e·6520·3c70··that·the·line·<p | |||
| 000009f0:·7265·3e47·5255·425f·434d·444c·494e·455f··re>GRUB_CMDLINE_ | |||
| 00000a00:·4c49·4e55·583d·222e·2e2e·223c·2f70·7265··LINUX="..."</pre | |||
| 00000a10:·3e20·7769·7468·696e·203c·7474·3e2f·6574··>·within·<tt>/et | |||
| 00000a20:·632f·6465·6661·756c·742f·6772·7562·3c2f··c/default/grub</ | |||
| 00000a30:·7474·3e0a·646f·6573·6e27·7420·636f·6e74··tt>.doesn't·cont | |||
| 00000a40:·6169·6e20·7468·6520·6172·6775·6d65·6e74··ain·the·argument | |||
| 00000a50:·203c·7474·3e6e·6f73·6d65·703c·2f74·743e···<tt>nosmep</tt> | |||
| 00000a60:·2e0a·5275·6e20·7468·6520·666f·6c6c·6f77··..Run·the·follow | |||
| 00000a70:·696e·6720·636f·6d6d·616e·6420·746f·2075··ing·command·to·u | |||
| 00000a80:·7064·6174·6520·636f·6d6d·616e·6420·6c69··pdate·command·li | |||
| 00000a90:·6e65·2066·6f72·2061·6c72·6561·6479·2069··ne·for·already·i | |||
| 00000aa0:·6e73·7461·6c6c·6564·206b·6572·6e65·6c73··nstalled·kernels | |||
| 00000ab0:·3a0a·3c70·7265·3e23·2067·7275·6262·7920··:.<pre>#·grubby· | |||
| 00000ac0:·2d2d·7570·6461·7465·2d6b·6572·6e65·6c3d··--update-kernel= | |||
| 00000ad0:·414c·4c20·2d2d·7265·6d6f·7665·2d61·7267··ALL·--remove-arg | |||
| 00000ae0:·733d·226e·6f73·6d65·7022·3c2f·7072·653e··s="nosmep"</pre> | |||
| 00000af0:·0a20·2020·2020·203c·2f74·643e·0a20·2020··.······</td>.··· | |||
| 00000b00:·2020·203c·7464·2078·6d6c·3a6c·616e·673d·····<td·xml:lang= | |||
| 00000b10:·2265·6e2d·5553·223e·0a20·2020·2020·2020··"en-US">.······· | |||
| 00000b20:·2044·6973·6162·6c69·6e67·2053·4d45·5020···Disabling·SMEP· | |||
| 00000b30:·6361·6e20·6661·6369·6c69·7461·7465·2065··can·facilitate·e | |||
| 00000b40:·7870·6c6f·6974·6174·696f·6e20·6f66·2063··xploitation·of·c | |||
| Max diff block lines reached; 3015383/3051837 bytes (98.81%) of diff not shown. | |||
| Offset 1, 13 lines modified | Offset 1, 29 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Red·Hat | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Red·Hat |
| 2 | Enterprise·Linux·8 | 2 | Enterprise·Linux·8 |
| 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 4 | ······························mode·from·unintentionally·reading/writing | ||
| 5 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 6 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 7 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 8 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 10 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 11 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 12 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 13 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 14 | ······························argument·nosmap.·Run·the·following·command | ||
| 15 | ······························to·update·command·line·for·already·installed | ||
| 16 | ······························kernels: | ||
| 17 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 18 | ······························args="nosmap" | ||
| 3 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 19 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 4 | ······························package·do·not·need·to·install·the·kernel- | 20 | ······························package·do·not·need·to·install·the·kernel- |
| 5 | ······························PAE·package·because·the·64-bit·x86·kernel | 21 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 6 | ······························already·includes·this·support.·However,·if | 22 | ······························already·includes·this·support.·However,·if |
| 7 | ······························the·system·is·32-bit·and·also·supports·the | 23 | ······························the·system·is·32-bit·and·also·supports·the |
| 8 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 24 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 9 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 25 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 15, 14 lines modified | Offset 31, 30 lines modified | ||
| 15 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 31 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 16 | ······························installed·with·the·following·command:········(NX)·support. | 32 | ······························installed·with·the·following·command:········(NX)·support. |
| 17 | ······························$·sudo·yum·install·kernel-PAE | 33 | ······························$·sudo·yum·install·kernel-PAE |
| 18 | ······························The·installation·process·should·also·have | 34 | ······························The·installation·process·should·also·have |
| 19 | ······························configured·the·bootloader·to·load·the·new | 35 | ······························configured·the·bootloader·to·load·the·new |
| 20 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 36 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 21 | ······························modify·/etc/default/grub·if·necessary. | 37 | ······························modify·/etc/default/grub·if·necessary. |
| 38 | ···········································································Use·of·a·64-bit·operating·system | ||
| 39 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 40 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 41 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 42 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 43 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 44 | ···········································································bits. | ||
| 45 | ···········································································Use·of·weak·or·untested·encryption | ||
| 46 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 47 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 48 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 49 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 50 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 51 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 52 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 53 | ···········································································validated. | ||
| 22 | ······························The·SMEP·is·used·to·prevent·the·supervisor | 54 | ······························The·SMEP·is·used·to·prevent·the·supervisor |
| 23 | ······························mode·from·executing·user·space·code,·it·is | 55 | ······························mode·from·executing·user·space·code,·it·is |
| 24 | ······························enabled·by·default·since·Linux·kernel·3.0. | 56 | ······························enabled·by·default·since·Linux·kernel·3.0. |
| 25 | ······························But·it·could·be·disabled·through·kernel·boot | 57 | ······························But·it·could·be·disabled·through·kernel·boot |
| 26 | ······························parameters.·Ensure·that·Supervisor·Mode | 58 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 27 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | 59 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate |
| 28 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | 60 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain |
| Offset 30, 46 lines modified | Offset 62, 14 lines modified | ||
| 30 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 62 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 31 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 63 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 32 | ······························argument·nosmep.·Run·the·following·command | 64 | ······························argument·nosmep.·Run·the·following·command |
| 33 | ······························to·update·command·line·for·already·installed | 65 | ······························to·update·command·line·for·already·installed |
| 34 | ······························kernels: | 66 | ······························kernels: |
| 35 | ······························#·grubby·--update-kernel=ALL·--remove- | 67 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 36 | ······························args="nosmep" | 68 | ······························args="nosmep" |
| 37 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 38 | ······························mode·from·unintentionally·reading/writing | ||
| 39 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 40 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 41 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 42 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 43 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 44 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 45 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 46 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 47 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 48 | ······························argument·nosmap.·Run·the·following·command | ||
| 49 | ······························to·update·command·line·for·already·installed | ||
| 50 | ······························kernels: | ||
| 51 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 52 | ······························args="nosmap" | ||
| 53 | ···········································································Use·of·weak·or·untested·encryption | ||
| 54 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | ||
| 55 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | ||
| 56 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | ||
| 57 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | ||
| 58 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | ||
| 59 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | ||
| 60 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | ||
| 61 | ···········································································validated. | ||
| 62 | ···········································································Use·of·a·64-bit·operating·system | ||
| 63 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 64 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 65 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 66 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 67 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 68 | ···········································································bits. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 90 lines modified | Offset 99, 70 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ···········································································The·CONFIG_SHUFFLE_PAGE_ALLOCATOR | ||
| 107 | ······························To·enable·randomization·of·the·page··········config·option·is·primarily·focused·on | ||
| 108 | ······························allocator·in·the·kernel,·add·the·············improving·the·average·utilization·of·a | ||
| 109 | ······························page_alloc.shuffle=1·argument·to·the·default·direct-mapped·memory-side-cache.·Aside | ||
| 110 | ······························GRUB·2·command·line.·To·ensure·that··········of·this·performance·effect,·it·also | ||
| 111 | ······························page_alloc.shuffle=1·is·added·as·a·kernel····reduces·predictability·of·page | ||
| 112 | ······························command·line·argument·to·newly·installed·····allocations·in·situations·when·the·bad | ||
| 113 | ······························kernels,·add·page_alloc.shuffle=1·to·the·····actor·can·crash·the·system·and·somehow | ||
| 114 | R8··Enable·randomization·of···default·Grub2·command·line·for·Linux·········leverage·knowledge·of·(page) | ||
| 115 | ····the·page·allocator········operating·systems.·Modify·the·line·within·/··allocation·order·right·after·a·fresh | ||
| 116 | ······························etc/default/grub·as·shown·below:·············reboot,·or·can·control·the·timing | ||
| 117 | ······························GRUB_CMDLINE_LINUX="...·page_alloc.shuffle=1·between·a·hot-pluggable·memory·node | ||
| Max diff block lines reached; 681855/694715 bytes (98.15%) of diff not shown. | |||
| Offset 1846, 461 lines modified | Offset 1846, 461 lines modified | ||
| 00007350:·652d·7573·6572·206d·6f64·652e·0a20·2020··e-user·mode..··· | 00007350:·652d·7573·6572·206d·6f64·652e·0a20·2020··e-user·mode..··· | ||
| 00007360:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | 00007360:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | ||
| 00007370:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | 00007370:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | ||
| 00007380:·2020·3c74·643e·312e·332e·323c·2f74·643e····<td>1.3.2</td> | 00007380:·2020·3c74·643e·312e·332e·323c·2f74·643e····<td>1.3.2</td> | ||
| 00007390:·0a20·2020·2020·203c·7464·3e56·6572·6966··.······<td>Verif | 00007390:·0a20·2020·2020·203c·7464·3e56·6572·6966··.······<td>Verif | ||
| 000073a0:·7920·2f62·6f6f·742f·6566·692f·4546·492f··y·/boot/efi/EFI/ | 000073a0:·7920·2f62·6f6f·742f·6566·692f·4546·492f··y·/boot/efi/EFI/ | Diff chunk too large, falling back to line-by-line diff (447 lines added, 447 lines removed) | |
| 000073b0:·7265·6468·6174·2f75·7365·722e·6366·6720··redhat/user.cfg· | 000073b0:·7265·6468·6174·2f75·7365·722e·6366·6720··redhat/user.cfg· | ||
| 000073c0:· | 000073c0:·4772·6f75·7020·4f77·6e65·7273·6869·703c··Group·Ownership< | ||
| 000073d0:·0a20·2020·2020·203c·7464·2078· | 000073d0:·2f74·643e·0a20·2020·2020·203c·7464·2078··/td>.······<td·x | ||
| 000073e0:·616e·673d·2265·6e2d·5553·223e· | 000073e0:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> | ||
| 000073f0:· | 000073f0:·0a20·2020·2020·2020·2054·6865·2066·696c··.········The·fil | ||
| 00007400:· | 00007400:·6520·3c74·743e·2f62·6f6f·742f·6566·692f··e·<tt>/boot/efi/ | ||
| 00007410:· | 00007410:·4546·492f·7265·6468·6174·2f75·7365·722e··EFI/redhat/user. | ||
| 00007420:·6 | 00007420:·6366·673c·2f74·743e·2073·686f·756c·6420··cfg</tt>·should· | ||
| 00007430:· | 00007430:·6265·2067·726f·7570·2d6f·776e·6564·2062··be·group-owned·b | ||
| 00007440:· | 00007440:·7920·7468·650a·3c74·743e·726f·6f74·3c2f··y·the.<tt>root</ | ||
| 00007450:·7 | 00007450:·7474·3e20·6772·6f75·7020·746f·2070·7265··tt>·group·to·pre | ||
| 00007460:·6 | 00007460:·7665·6e74·2072·6561·6469·6e67·206f·7220··vent·reading·or· | ||
| 00007470:· | 00007470:·6d6f·6469·6669·6361·7469·6f6e·206f·6620··modification·of· | ||
| 00007480:· | 00007480:·7468·6520·6669·6c65·2e0a·0a54·6f20·7072··the·file...To·pr | ||
| 00007490:·6 | 00007490:·6f70·6572·6c79·2073·6574·2074·6865·2067··operly·set·the·g | ||
| 000074a0:· | 000074a0:·726f·7570·206f·776e·6572·206f·6620·3c63··roup·owner·of·<c | ||
| 000074b0:· | 000074b0:·6f64·653e·2f62·6f6f·742f·6566·692f·4546··ode>/boot/efi/EF | ||
| 000074c0:· | 000074c0:·492f·7265·6468·6174·2f75·7365·722e·6366··I/redhat/user.cf | ||
| 000074d0:·6 | 000074d0:·673c·2f63·6f64·653e·2c20·7275·6e20·7468··g</code>,·run·th | ||
| 000074e0:· | 000074e0:·6520·636f·6d6d·616e·643a·0a3c·7072·653e··e·command:.<pre> | ||
| 000074f0:·2 | 000074f0:·2420·7375·646f·2063·6867·7270·2072·6f6f··$·sudo·chgrp·roo | ||
| 00007500:· | 00007500:·7420·2f62·6f6f·742f·6566·692f·4546·492f··t·/boot/efi/EFI/ | ||
| 00007510:· | 00007510:·7265·6468·6174·2f75·7365·722e·6366·673c··redhat/user.cfg< | ||
| 00007520:· | 00007520:·2f70·7265·3e0a·2020·2020·2020·3c2f·7464··/pre>.······</td | ||
| 00007530:·20 | 00007530:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | ||
| 00007540:· | 00007540:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | ||
| 00007550:· | 00007550:·2020·2020·2020·5468·6520·3c74·743e·726f········The·<tt>ro | ||
| 00007560:· | 00007560:·6f74·3c2f·7474·3e20·6772·6f75·7020·6973··ot</tt>·group·is | ||
| 00007570:·2 | 00007570:·2061·2068·6967·686c·792d·7072·6976·696c···a·highly-privil | ||
| 00007580:· | 00007580:·6567·6564·2067·726f·7570·2e20·4675·7274··eged·group.·Furt | ||
| 00007590:· | 00007590:·6865·726d·6f72·652c·2074·6865·2067·726f··hermore,·the·gro | ||
| 000075a0:· | 000075a0:·7570·2d6f·776e·6572·206f·6620·7468·6973··up-owner·of·this | ||
| 000075b0:· | 000075b0:·0a66·696c·6520·7368·6f75·6c64·206e·6f74··.file·should·not | ||
| 000075c0:· | 000075c0:·2068·6176·6520·616e·7920·6163·6365·7373···have·any·access | ||
| 000075d0:·2 | 000075d0:·2070·7269·7669·6c65·6765·7320·616e·7977···privileges·anyw | ||
| 000075e0:· | 000075e0:·6179·2e20·4e6f·6e2d·726f·6f74·2075·7365··ay.·Non-root·use | ||
| 000075f0:·7 | 000075f0:·7273·2077·686f·2072·6561·6420·7468·6520··rs·who·read·the· | ||
| 00007600:· | 00007600:·626f·6f74·2070·6172·616d·6574·6572·730a··boot·parameters. | ||
| 00007610:·6 | 00007610:·6d61·7920·6265·2061·626c·6520·746f·2069··may·be·able·to·i | ||
| 00007620:· | 00007620:·6465·6e74·6966·7920·7765·616b·6e65·7373··dentify·weakness | ||
| 00007630:· | 00007630:·6573·2069·6e20·7365·6375·7269·7479·2075··es·in·security·u | ||
| 00007640:· | 00007640:·706f·6e20·626f·6f74·2061·6e64·2062·6520··pon·boot·and·be· | ||
| 00007650:· | 00007650:·6162·6c65·2074·6f20·6578·706c·6f69·7420··able·to·exploit· | ||
| 00007660:·7 | 00007660:·7468·656d·2e0a·2020·2020·2020·3c2f·7464··them..······</td | ||
| 00007670:· | 00007670:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | ||
| 00007680:·3c | 00007680:·3c74·723e·0a20·2020·2020·203c·7464·3e31··<tr>.······<td>1 | ||
| 00007690:· | 00007690:·2e33·2e32·3c2f·7464·3e0a·2020·2020·2020··.3.2</td>.······ | ||
| 000076a0:· | 000076a0:·3c74·643e·5665·7269·6679·2074·6865·2055··<td>Verify·the·U | ||
| 000076b0:· | 000076b0:·4546·4920·426f·6f74·204c·6f61·6465·7220··EFI·Boot·Loader· | ||
| 000076c0:·6 | 000076c0:·6772·7562·2e63·6667·2047·726f·7570·204f··grub.cfg·Group·O | ||
| 000076d0:· | 000076d0:·776e·6572·7368·6970·3c2f·7464·3e0a·2020··wnership</td>.·· | ||
| 000076e0:·2 | 000076e0:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | ||
| 000076f0:·3 | 000076f0:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | ||
| 00007700:· | 00007700:·2020·5468·6520·6669·6c65·203c·7474·3e2f····The·file·<tt>/ | ||
| 00007710:· | 00007710:·626f·6f74·2f65·6669·2f45·4649·2f72·6564··boot/efi/EFI/red | ||
| 00007720:· | 00007720:·6861·742f·6772·7562·2e63·6667·3c2f·7474··hat/grub.cfg</tt | ||
| 00007730:· | 00007730:·3e20·7368·6f75·6c64·0a62·6520·6772·6f75··>·should.be·grou | ||
| 00007740:· | 00007740:·702d·6f77·6e65·6420·6279·2074·6865·203c··p-owned·by·the·< | ||
| 00007750:· | 00007750:·7474·3e72·6f6f·743c·2f74·743e·2067·726f··tt>root</tt>·gro | ||
| 00007760:· | 00007760:·7570·2074·6f20·7072·6576·656e·740a·6465··up·to·prevent.de | ||
| 00007770:· | 00007770:·7374·7275·6374·696f·6e20·6f72·206d·6f64··struction·or·mod | ||
| 00007780:· | 00007780:·6966·6963·6174·696f·6e20·6f66·2074·6865··ification·of·the | ||
| 00007790:·2 | 00007790:·2066·696c·652e·0a0a·546f·2070·726f·7065···file...To·prope | ||
| 000077a0:· | 000077a0:·726c·7920·7365·7420·7468·6520·6772·6f75··rly·set·the·grou | ||
| 000077b0:·6 | 000077b0:·7020·6f77·6e65·7220·6f66·203c·636f·6465··p·owner·of·<code | ||
| 000077c0:·6 | 000077c0:·3e2f·626f·6f74·2f65·6669·2f45·4649·2f72··>/boot/efi/EFI/r | ||
| 000077d0:· | 000077d0:·6564·6861·742f·6772·7562·2e63·6667·3c2f··edhat/grub.cfg</ | ||
| 000077e0:·6 | 000077e0:·636f·6465·3e2c·2072·756e·2074·6865·2063··code>,·run·the·c | ||
| 000077f0:· | 000077f0:·6f6d·6d61·6e64·3a0a·3c70·7265·3e24·2073··ommand:.<pre>$·s | ||
| 00007800:· | 00007800:·7564·6f20·6368·6772·7020·726f·6f74·202f··udo·chgrp·root·/ | ||
| 00007810:· | 00007810:·626f·6f74·2f65·6669·2f45·4649·2f72·6564··boot/efi/EFI/red | ||
| 00007820:·6 | 00007820:·6861·742f·6772·7562·2e63·6667·3c2f·7072··hat/grub.cfg</pr | ||
| 00007830:·6 | 00007830:·653e·0a20·2020·2020·203c·2f74·643e·0a20··e>.······</td>.· | ||
| 00007840:· | 00007840:·2020·2020·203c·7464·2078·6d6c·3a6c·616e·······<td·xml:lan | ||
| 00007850:·6 | 00007850:·673d·2265·6e2d·5553·223e·0a20·2020·2020··g="en-US">.····· | ||
| 00007860:·20 | 00007860:·2020·2054·6865·203c·7474·3e72·6f6f·743c·····The·<tt>root< | ||
| 00007870:· | 00007870:·2f74·743e·2067·726f·7570·2069·7320·6120··/tt>·group·is·a· | ||
| 00007880:· | 00007880:·6869·6768·6c79·2d70·7269·7669·6c65·6765··highly-privilege | ||
| 00007890:·6 | 00007890:·6420·6772·6f75·702e·2046·7572·7468·6572··d·group.·Further | ||
| 000078a0:·6 | 000078a0:·6d6f·7265·2c20·7468·6520·6772·6f75·702d··more,·the·group- | ||
| 000078b0:· | 000078b0:·6f77·6e65·7220·6f66·2074·6869·730a·6669··owner·of·this.fi | ||
| 000078c0:· | 000078c0:·6c65·2073·686f·756c·6420·6e6f·7420·6861··le·should·not·ha | ||
| 000078d0:·206 | 000078d0:·7665·2061·6e79·2061·6363·6573·7320·7072··ve·any·access·pr | ||
| 000078e0:·6 | 000078e0:·6976·696c·6567·6573·2061·6e79·7761·792e··ivileges·anyway. | ||
| 000078f0:· | 000078f0:·0a20·2020·2020·203c·2f74·643e·0a20·2020··.······</td>.··· | ||
| 00007900:· | 00007900:·203c·2f74·723e·0a20·2020·203c·7472·3e0a···</tr>.····<tr>. | ||
| 00007910:· | 00007910:·2020·2020·2020·3c74·643e·312e·332e·323c········<td>1.3.2< | ||
| 00007920:· | 00007920:·2f74·643e·0a20·2020·2020·203c·7464·3e56··/td>.······<td>V | ||
| 00007930:·6 | 00007930:·6572·6966·7920·2f62·6f6f·742f·6772·7562··erify·/boot/grub | ||
| 00007940:· | 00007940:·322f·7573·6572·2e63·6667·2055·7365·7220··2/user.cfg·User· | ||
| 00007950:· | 00007950:·4f77·6e65·7273·6869·703c·2f74·643e·0a20··Ownership</td>.· | ||
| 00007960:· | 00007960:·2020·2020·203c·7464·2078·6d6c·3a6c·616e·······<td·xml:lan | ||
| 00007970:· | 00007970:·673d·2265·6e2d·5553·223e·0a20·2020·2020··g="en-US">.····· | ||
| 00007980:· | 00007980:·2020·2054·6865·2066·696c·6520·3c74·743e·····The·file·<tt> | ||
| 00007990:·6f | 00007990:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | ||
| 000079a0:· | 000079a0:·2e63·6667·3c2f·7474·3e20·7368·6f75·6c64··.cfg</tt>·should | ||
| 000079b0:·2 | 000079b0:·2062·6520·6f77·6e65·6420·6279·2074·6865···be·owned·by·the | ||
| 000079c0:· | 000079c0:·203c·7474·3e72·6f6f·743c·2f74·743e·0a75···<tt>root</tt>.u | ||
| 000079d0:·6 | 000079d0:·7365·7220·746f·2070·7265·7665·6e74·2072··ser·to·prevent·r | ||
| 000079e0:·6 | 000079e0:·6561·6469·6e67·206f·7220·6d6f·6469·6669··eading·or·modifi | ||
| 000079f0:·6 | 000079f0:·6361·7469·6f6e·206f·6620·7468·6520·6669··cation·of·the·fi | ||
| 00007a00:· | 00007a00:·6c65·2e0a·0a54·6f20·7072·6f70·6572·6c79··le...To·properly | ||
| 00007a10:· | 00007a10:·2073·6574·2074·6865·206f·776e·6572·206f···set·the·owner·o | ||
| 00007a20:· | 00007a20:·6620·3c63·6f64·653e·2f62·6f6f·742f·6772··f·<code>/boot/gr | ||
| 00007a30:·7 | 00007a30:·7562·322f·7573·6572·2e63·6667·3c2f·636f··ub2/user.cfg</co | ||
| 00007a40:· | 00007a40:·6465·3e2c·2072·756e·2074·6865·2063·6f6d··de>,·run·the·com | ||
| 00007a50:·6 | 00007a50:·6d61·6e64·3a0a·3c70·7265·3e24·2073·7564··mand:.<pre>$·sud | ||
| 00007a60:·6 | 00007a60:·6f20·6368·6f77·6e20·726f·6f74·202f·626f··o·chown·root·/bo | ||
| 00007a70:· | 00007a70:·6f74·2f67·7275·6232·2f75·7365·722e·6366··ot/grub2/user.cf | ||
| 00007a80:· | 00007a80:·6720·3c2f·7072·653e·0a20·2020·2020·203c··g·</pre>.······< | ||
| 00007a90:· | 00007a90:·2f74·643e·0a20·2020·2020·203c·7464·2078··/td>.······<td·x | ||
| 00007aa0:· | 00007aa0:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> | ||
| 00007ab0:· | 00007ab0:·0a20·2020·2020·2020·204f·6e6c·7920·726f··.········Only·ro | ||
| 00007ac0:· | 00007ac0:·6f74·2073·686f·756c·6420·6265·2061·626c··ot·should·be·abl | ||
| 00007ad0:· | 00007ad0:·6520·746f·206d·6f64·6966·7920·696d·706f··e·to·modify·impo | ||
| 00007ae0:· | 00007ae0:·7274·616e·7420·626f·6f74·2070·6172·616d··rtant·boot·param | ||
| 00007af0:·6 | 00007af0:·6574·6572·732e·2041·6c73·6f2c·206e·6f6e··eters.·Also,·non | ||
| 00007b00:·2 | 00007b00:·2d72·6f6f·7420·7573·6572·7320·7768·6f20··-root·users·who· | ||
| 00007b10:·7 | 00007b10:·7265·6164·0a74·6865·2062·6f6f·7420·7061··read.the·boot·pa | ||
| 00007b20:· | 00007b20:·7261·6d65·7465·7273·206d·6179·2062·6520··rameters·may·be· | ||
| Max diff block lines reached; 1127334/1189598 bytes (94.77%) of diff not shown. | |||
| Offset 461, 31 lines modified | Offset 461, 14 lines modified | ||
| 461 | 1.3.1·············Set·Boot·Loader·····Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially | 461 | 1.3.1·············Set·Boot·Loader·····Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially |
| 462 | ··················Password·in·grub2···generate·a·hash·for·the·password·by·running·the········alter·important | 462 | ··················Password·in·grub2···generate·a·hash·for·the·password·by·running·the········alter·important |
| 463 | ······································following·command:·····································bootloader·settings. | 463 | ······································following·command:·····································bootloader·settings. |
| 464 | ······································#·grub2-setpassword····································These·include·which | 464 | ······································#·grub2-setpassword····································These·include·which |
| 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and | 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and |
| 466 | ·····························································································whether·to·enter | 466 | ·····························································································whether·to·enter |
| 467 | ·····························································································single-user·mode. | 467 | ·····························································································single-user·mode. |
| 468 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions | ||
| 469 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 470 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read | ||
| 471 | ··················Permissions·········$·sudo·chmod·600·/boot/efi/EFI/redhat/user.cfg·········or·modify·important | ||
| 472 | ·····························································································boot·parameters. | ||
| 473 | ··················Verify·the·UEFI·····File·permissions·for·/boot/efi/EFI/redhat/grub.cfg·····Proper·permissions | ||
| 474 | ··················Boot·Loader·········should·be·set·to·700.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 475 | 1.3.2·············grub.cfg············of·/boot/efi/EFI/redhat/grub.cfg,·run·the·command:·····root·user·can·modify | ||
| 476 | ··················Permissions·········$·sudo·chmod·700·/boot/efi/EFI/redhat/grub.cfg·········important·boot | ||
| 477 | ·····························································································parameters. | ||
| 478 | ······································The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·······The·root·group·is·a | ||
| 479 | ··················Verify·the·UEFI·····group-owned·by·the·root·group·to·prevent·destruction···highly-privileged | ||
| 480 | ··················Boot·Loader·········or·modification·of·the·file.·To·properly·set·the·group·group.·Furthermore, | ||
| 481 | 1.3.2·············grub.cfg·Group······owner·of·/boot/efi/EFI/redhat/grub.cfg,·run·the········the·group-owner·of | ||
| 482 | ··················Ownership···········command:···············································this·file·should·not | ||
| 483 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/grub.cfg········have·any·access | ||
| 484 | ·····························································································privileges·anyway. | ||
| 485 | ·····························································································The·root·group·is·a | 468 | ·····························································································The·root·group·is·a |
| 486 | ·····························································································highly-privileged | 469 | ·····························································································highly-privileged |
| 487 | ·····························································································group.·Furthermore, | 470 | ·····························································································group.·Furthermore, |
| 488 | ·····························································································the·group-owner·of | 471 | ·····························································································the·group-owner·of |
| 489 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·······this·file·should·not | 472 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·······this·file·should·not |
| 490 | ······································group-owned·by·the·root·group·to·prevent·reading·or····have·any·access | 473 | ······································group-owned·by·the·root·group·to·prevent·reading·or····have·any·access |
| 491 | ··················Verify·/boot/efi/···modification·of·the·file.·To·properly·set·the·group····privileges·anyway. | 474 | ··················Verify·/boot/efi/···modification·of·the·file.·To·properly·set·the·group····privileges·anyway. |
| Offset 493, 48 lines modified | Offset 476, 53 lines modified | ||
| 493 | ··················Group·Ownership·····command:···············································read·the·boot | 476 | ··················Group·Ownership·····command:···············································read·the·boot |
| 494 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/user.cfg········parameters·may·be | 477 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/user.cfg········parameters·may·be |
| 495 | ·····························································································able·to·identify | 478 | ·····························································································able·to·identify |
| 496 | ·····························································································weaknesses·in | 479 | ·····························································································weaknesses·in |
| 497 | ·····························································································security·upon·boot | 480 | ·····························································································security·upon·boot |
| 498 | ·····························································································and·be·able·to | 481 | ·····························································································and·be·able·to |
| 499 | ·····························································································exploit·them. | 482 | ·····························································································exploit·them. |
| 500 | ··················Verify·the·UEFI·····The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·owned·Only·root·should·be | ||
| 501 | ··················Boot·Loader·········by·the·root·user·to·prevent·destruction·or·············able·to·modify | ||
| 502 | 1.3.2·············grub.cfg·User·······modification·of·the·file.·To·properly·set·the·owner·of·important·boot | ||
| 503 | ··················Ownership···········/boot/efi/EFI/redhat/grub.cfg,·run·the·command:········parameters. | ||
| 504 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/grub.cfg | ||
| 505 | ······································File·permissions·for·/boot/grub2/grub.cfg·should·be····Proper·permissions | ||
| 506 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | ||
| 507 | 1.3.2·············grub.cfg············grub2/grub.cfg,·run·the·command:·······················root·user·can·modify | ||
| 508 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/grub.cfg··················important·boot | ||
| 509 | ·····························································································parameters. | ||
| 510 | ······································The·file·/boot/ | 483 | ······································The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·······The·root·group·is·a |
| 484 | ··················Verify·the·UEFI·····group-owned·by·the·root·group·to·prevent·destruction···highly-privileged | ||
| 485 | ··················Boot·Loader·········or·modification·of·the·file.·To·properly·set·the·group·group.·Furthermore, | ||
| 486 | 1.3.2·············grub.cfg·Group······owner·of·/boot/efi/EFI/redhat/grub.cfg,·run·the········the·group-owner·of | ||
| 511 | ··················Verify·/boot/grub2/·root·user·to·prevent·destruction·or·modification·of····able·to·modify | ||
| 512 | 1.3.2·············grub.cfg·User·······the·file.·To·properly·set·the·owner·of·/boot/grub2/····important·boot | ||
| 513 | ··················Ownership···········grub.cfg,·run·the·command:·····························parameters. | ||
| 514 | ······································$·sudo·chown·root·/boot/grub2/grub.cfg | ||
| 515 | ·····························································································The·root·group·is·a | ||
| 516 | ······································The·file·/boot/grub2/grub.cfg·should·be·group-owned·by·highly-privileged | ||
| 517 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·destruction·or·modification··group.·Furthermore, | ||
| 518 | 1.3.2·············grub.cfg·Group······of·the·file.·To·properly·set·the·group·owner·of·/boot/·the·group-owner·of | ||
| 519 | ··················Ownership··········· | 487 | ··················Ownership···········command:···············································this·file·should·not |
| 520 | ······································$·sudo·chgrp·root·/boot/ | 488 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/grub.cfg········have·any·access |
| 521 | ·····························································································privileges·anyway. | 489 | ·····························································································privileges·anyway. |
| 522 | ·····························································································Only·root·should·be | 490 | ·····························································································Only·root·should·be |
| 523 | ·····························································································able·to·modify | 491 | ·····························································································able·to·modify |
| 524 | ·····························································································important·boot | 492 | ·····························································································important·boot |
| 525 | ······································The·file·/boot/grub2/user.cfg·should·be·owned·by·the···parameters.·Also, | 493 | ······································The·file·/boot/grub2/user.cfg·should·be·owned·by·the···parameters.·Also, |
| 526 | ··················Verify·/boot/grub2/·root·user·to·prevent·reading·or·modification·of·the····non-root·users·who | 494 | ··················Verify·/boot/grub2/·root·user·to·prevent·reading·or·modification·of·the····non-root·users·who |
| 527 | 1.3.2·············user.cfg·User·······file.·To·properly·set·the·owner·of·/boot/grub2/········read·the·boot | 495 | 1.3.2·············user.cfg·User·······file.·To·properly·set·the·owner·of·/boot/grub2/········read·the·boot |
| 528 | ··················Ownership···········user.cfg,·run·the·command:·····························parameters·may·be | 496 | ··················Ownership···········user.cfg,·run·the·command:·····························parameters·may·be |
| 529 | ······································$·sudo·chown·root·/boot/grub2/user.cfg·················able·to·identify | 497 | ······································$·sudo·chown·root·/boot/grub2/user.cfg·················able·to·identify |
| 530 | ·····························································································weaknesses·in | 498 | ·····························································································weaknesses·in |
| 531 | ·····························································································security·upon·boot | 499 | ·····························································································security·upon·boot |
| 532 | ·····························································································and·be·able·to | 500 | ·····························································································and·be·able·to |
| 533 | ·····························································································exploit·them. | 501 | ·····························································································exploit·them. |
| 502 | ······································File·permissions·for·/boot/grub2/user.cfg·should·be····Proper·permissions | ||
| 503 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | ||
| 504 | 1.3.2·············user.cfg············grub2/user.cfg,·run·the·command:·······················root·user·can·read | ||
| 505 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/user.cfg··················or·modify·important | ||
| 506 | ·····························································································boot·parameters. | ||
| 507 | ······································File·permissions·for·/boot/grub2/grub.cfg·should·be····Proper·permissions | ||
| 508 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | ||
| 509 | 1.3.2·············grub.cfg············grub2/grub.cfg,·run·the·command:·······················root·user·can·modify | ||
| 510 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/grub.cfg··················important·boot | ||
| 511 | ·····························································································parameters. | ||
| 512 | ··················Verify·the·UEFI·····The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·owned·Only·root·should·be | ||
| 513 | ··················Boot·Loader·········by·the·root·user·to·prevent·destruction·or·············able·to·modify | ||
| 514 | 1.3.2·············grub.cfg·User·······modification·of·the·file.·To·properly·set·the·owner·of·important·boot | ||
| 515 | ··················Ownership···········/boot/efi/EFI/redhat/grub.cfg,·run·the·command:········parameters. | ||
| 516 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/grub.cfg | ||
| 517 | ······································The·file·/boot/grub2/grub.cfg·should·be·owned·by·the···Only·root·should·be | ||
| 518 | ··················Verify·/boot/grub2/·root·user·to·prevent·destruction·or·modification·of····able·to·modify | ||
| 519 | 1.3.2·············grub.cfg·User·······the·file.·To·properly·set·the·owner·of·/boot/grub2/····important·boot | ||
| 520 | ··················Ownership···········grub.cfg,·run·the·command:·····························parameters. | ||
| 521 | ······································$·sudo·chown·root·/boot/grub2/grub.cfg | ||
| 534 | ·····························································································The·root·group·is·a | 522 | ·····························································································The·root·group·is·a |
| 535 | ·····························································································highly-privileged | 523 | ·····························································································highly-privileged |
| 536 | ·····························································································group.·Furthermore, | 524 | ·····························································································group.·Furthermore, |
| 537 | ·····························································································the·group-owner·of | 525 | ·····························································································the·group-owner·of |
| 538 | ·····························································································this·file·should·not | 526 | ·····························································································this·file·should·not |
| 539 | ······································The·file·/boot/grub2/user.cfg·should·be·group-owned·by·have·any·access | 527 | ······································The·file·/boot/grub2/user.cfg·should·be·group-owned·by·have·any·access |
| 540 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·reading·or·modification·of···privileges·anyway. | 528 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·reading·or·modification·of···privileges·anyway. |
| Offset 542, 31 lines modified | Offset 530, 43 lines modified | ||
| 542 | ··················Ownership···········grub2/user.cfg,·run·the·command:·······················read·the·boot | 530 | ··················Ownership···········grub2/user.cfg,·run·the·command:·······················read·the·boot |
| 543 | ······································$·sudo·chgrp·root·/boot/grub2/user.cfg·················parameters·may·be | 531 | ······································$·sudo·chgrp·root·/boot/grub2/user.cfg·················parameters·may·be |
| 544 | ·····························································································able·to·identify | 532 | ·····························································································able·to·identify |
| 545 | ·····························································································weaknesses·in | 533 | ·····························································································weaknesses·in |
| 546 | ·····························································································security·upon·boot | 534 | ·····························································································security·upon·boot |
| 547 | ·····························································································and·be·able·to | 535 | ·····························································································and·be·able·to |
| 548 | ·····························································································exploit·them. | 536 | ·····························································································exploit·them. |
| 549 | ······································File·permissions·for·/boot/grub2/user.cfg·should·be····Proper·permissions | ||
| 550 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | ||
| 551 | 1.3.2·············user.cfg············grub2/user.cfg,·run·the·command:·······················root·user·can·read | ||
| 552 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/user.cfg··················or·modify·important | ||
| 553 | ·····························································································boot·parameters. | ||
| 554 | ·····························································································Only·root·should·be | 537 | ·····························································································Only·root·should·be |
| 555 | ·····························································································able·to·modify | 538 | ·····························································································able·to·modify |
| 556 | ·····························································································important·boot | 539 | ·····························································································important·boot |
| 557 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·owned·parameters.·Also, | 540 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·owned·parameters.·Also, |
| 558 | ··················Verify·/boot/efi/···by·the·root·user·to·prevent·reading·or·modification·of·non-root·users·who | 541 | ··················Verify·/boot/efi/···by·the·root·user·to·prevent·reading·or·modification·of·non-root·users·who |
| 559 | 1.3.2·············EFI/redhat/user.cfg·the·file.·To·properly·set·the·owner·of·/boot/efi/EFI/··read·the·boot | 542 | 1.3.2·············EFI/redhat/user.cfg·the·file.·To·properly·set·the·owner·of·/boot/efi/EFI/··read·the·boot |
| 560 | ··················User·Ownership······redhat/user.cfg,·run·the·command:······················parameters·may·be | 543 | ··················User·Ownership······redhat/user.cfg,·run·the·command:······················parameters·may·be |
| 561 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/user.cfg········able·to·identify | 544 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/user.cfg········able·to·identify |
| 562 | ·····························································································weaknesses·in | 545 | ·····························································································weaknesses·in |
| 563 | ·····························································································security·upon·boot | 546 | ·····························································································security·upon·boot |
| 564 | ·····························································································and·be·able·to | 547 | ·····························································································and·be·able·to |
| Max diff block lines reached; 346621/360959 bytes (96.03%) of diff not shown. | |||
| Offset 40, 26 lines modified | Offset 40, 83 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1</td> | ||
| 48 | ······<td>Disable·GDM·Automatic·Login</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | ||
| 51 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 52 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 53 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 54 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 55 | <pre>[daemon] | ||
| 56 | AutomaticLoginEnable=false</pre> | ||
| 57 | ······</td> | ||
| 58 | ······<td·xml:lang="en-US"> | ||
| 59 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 60 | system·security. | ||
| 61 | ······</td> | ||
| 62 | ····</tr> | ||
| 63 | ····<tr> | ||
| 64 | ······<td>3.1.1<br/>3.4.5</td> | ||
| 65 | ······<td>Require·Authentication·for·Emergency·Systemd·Target</td> | ||
| 66 | ······<td·xml:lang="en-US"> | ||
| 67 | ········Emergency·mode·is·intended·as·a·system·recovery | ||
| 68 | method,·providing·a·single·user·root·access·to·the·system | ||
| 69 | during·a·failed·boot·sequence. | ||
| 70 | <br·/><br·/> | ||
| 71 | By·default,·Emergency·mode·is·protected·by·requiring·a·password·and·is·set | ||
| 72 | in·<tt>/usr/lib/systemd/system/emergency.service</tt>. | ||
| 73 | ······</td> | ||
| 74 | ······<td·xml:lang="en-US"> | ||
| 75 | ········This·prevents·attackers·with·physical·access·from·trivially·bypassing·security | ||
| 76 | on·the·machine·and·gaining·root·access.·Such·accesses·are·further·prevented | ||
| 77 | by·configuring·the·bootloader·password. | ||
| 78 | ······</td> | ||
| 79 | ····</tr> | ||
| 80 | ····<tr> | ||
| 47 | ······<td>3.1.1<br/>3.1.5</td> | 81 | ······<td>3.1.1<br/>3.1.5</td> |
| 48 | ······<td> | 82 | ······<td>Disable·SSH·Root·Login</td> |
| 49 | ······<td·xml:lang="en-US"> | 83 | ······<td·xml:lang="en-US"> |
| 50 | ········To·restrict·root·logins·on·serial·ports, | ||
| 51 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 52 | <pre>ttyS0 | ||
| 53 | t | 84 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 85 | system·directly·over·a·network. | ||
| 86 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | ||
| 87 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 88 | <pre>PermitRootLogin·no</pre> | ||
| 54 | ······</td> | 89 | ······</td> |
| 55 | ······<td·xml:lang="en-US"> | 90 | ······<td·xml:lang="en-US"> |
| 56 | ········Preventing·direct·root·login·to·serial·port·interfaces | ||
| 57 | helps·ensure·accountability·for·actions·taken·on·the·systems | ||
| 58 | 91 | ········Even·though·the·communications·channel·may·be·encrypted,·an·additional·layer·of | |
| 92 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | ||
| 93 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | ||
| 94 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | ||
| 95 | direct·attack·attempts·on·root's·password. | ||
| 96 | ······</td> | ||
| 97 | ····</tr> | ||
| 98 | ····<tr> | ||
| 99 | ······<td>3.1.1<br/>3.4.5</td> | ||
| 100 | ······<td>Require·Authentication·for·Single·User·Mode</td> | ||
| 101 | ······<td·xml:lang="en-US"> | ||
| 102 | ········Single-user·mode·is·intended·as·a·system·recovery | ||
| 103 | method,·providing·a·single·user·root·access·to·the·system·by | ||
| 104 | providing·a·boot·option·at·startup. | ||
| 105 | <br·/><br·/> | ||
| 106 | By·default,·single-user·mode·is·protected·by·requiring·a·password·and·is·set | ||
| 107 | in·<tt>/usr/lib/systemd/system/rescue.service</tt>. | ||
| 108 | ······</td> | ||
| 109 | ······<td·xml:lang="en-US"> | ||
| 110 | ········This·prevents·attackers·with·physical·access·from·trivially·bypassing·security | ||
| 111 | on·the·machine·and·gaining·root·access.·Such·accesses·are·further·prevented | ||
| 112 | by·configuring·the·bootloader·password. | ||
| 59 | ······</td> | 113 | ······</td> |
| 60 | ····</tr> | 114 | ····</tr> |
| 61 | ····<tr> | 115 | ····<tr> |
| 62 | ······<td>3.1.1<br/>3.1.5</td> | 116 | ······<td>3.1.1<br/>3.1.5</td> |
| 63 | ······<td>Verify·Only·Root·Has·UID·0</td> | 117 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 64 | ······<td·xml:lang="en-US"> | 118 | ······<td·xml:lang="en-US"> |
| 65 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | 119 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should |
| Offset 77, 14 lines modified | Offset 134, 31 lines modified | ||
| 77 | guess·a·password·for·a·privileged·account.·Proper·configuration·of | 134 | guess·a·password·for·a·privileged·account.·Proper·configuration·of |
| 78 | sudo·is·recommended·to·afford·multiple·system·administrators | 135 | sudo·is·recommended·to·afford·multiple·system·administrators |
| 79 | access·to·root·privileges·in·an·accountable·manner. | 136 | access·to·root·privileges·in·an·accountable·manner. |
| 80 | ······</td> | 137 | ······</td> |
| 81 | ····</tr> | 138 | ····</tr> |
| 82 | ····<tr> | 139 | ····<tr> |
| 83 | ······<td>3.1.1<br/>3.1.5</td> | 140 | ······<td>3.1.1<br/>3.1.5</td> |
| 141 | ······<td>Restrict·Virtual·Console·Root·Logins</td> | ||
| 142 | ······<td·xml:lang="en-US"> | ||
| 143 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 144 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 145 | <pre>vc/1 | ||
| 146 | vc/2 | ||
| 147 | vc/3 | ||
| 148 | vc/4</pre> | ||
| 149 | ······</td> | ||
| 150 | ······<td·xml:lang="en-US"> | ||
| 151 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 152 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 153 | using·the·root·account. | ||
| 154 | ······</td> | ||
| 155 | ····</tr> | ||
| 156 | ····<tr> | ||
| 157 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 84 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | 158 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> |
| 85 | ······<td·xml:lang="en-US"> | 159 | ······<td·xml:lang="en-US"> |
| 86 | ········If·an·account·is·configured·for·password·authentication | 160 | ········If·an·account·is·configured·for·password·authentication |
| 87 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | 161 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log |
| 88 | into·the·account·without·authentication.·Remove·any·instances·of·the | 162 | into·the·account·without·authentication.·Remove·any·instances·of·the |
| 89 | <tt>nullok</tt>·in | 163 | <tt>nullok</tt>·in |
| Offset 96, 48 lines modified | Offset 170, 14 lines modified | ||
| 96 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| 97 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | 171 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and |
| 98 | run·commands·with·the·privileges·of·that·account.·Accounts·with | 172 | run·commands·with·the·privileges·of·that·account.·Accounts·with |
| 99 | empty·passwords·should·never·be·used·in·operational·environments. | 173 | empty·passwords·should·never·be·used·in·operational·environments. |
| 100 | ······</td> | 174 | ······</td> |
| 101 | ····</tr> | 175 | ····</tr> |
| Max diff block lines reached; 457757/462782 bytes (98.91%) of diff not shown. | |||
| Offset 1, 21 lines modified | Offset 1, 66 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of·Red | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of·Red |
| 2 | Hat·Enterprise·Linux·8 | 2 | Hat·Enterprise·Linux·8 |
| 3 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 4 | ·······································automatically·login·without·user·interaction·or | ||
| 5 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | ||
| 6 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | ||
| 7 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users | ||
| 8 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts | ||
| 9 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system | ||
| 10 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. | ||
| 11 | ·······································[daemon] | ||
| 12 | ·······································AutomaticLoginEnable=false | ||
| 13 | ······························································································This·prevents | ||
| 14 | ······························································································attackers·with | ||
| 15 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | ||
| 16 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | ||
| 17 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | ||
| 18 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | ||
| 19 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | ||
| 20 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | ||
| 21 | ·······································emergency.service.·····································prevented·by | ||
| 22 | ······························································································configuring·the | ||
| 23 | ······························································································bootloader·password. | ||
| 3 | ······························································································ | 24 | ······························································································Even·though·the |
| 25 | ······························································································communications | ||
| 26 | ······························································································channel·may·be | ||
| 27 | ······························································································encrypted,·an | ||
| 28 | ······························································································additional·layer·of | ||
| 4 | ······························································································ | 29 | ······························································································security·is·gained |
| 5 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 6 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 7 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 8 | ·······································ttyS1··················································actions·taken·on·the | ||
| 9 | ······························································································ | 30 | ······························································································by·extending·the |
| 31 | ······························································································policy·of·not | ||
| 32 | ·······································The·root·user·should·never·be·allowed·to·login·to·a····logging·directly·on | ||
| 33 | 3.1.1··································system·directly·over·a·network.·To·disable·root·login··as·root.·In | ||
| 34 | 3.1.5···Disable·SSH·Root·Login·········via·SSH,·add·or·correct·the·following·line·in·/etc/····addition,·logging·in | ||
| 35 | ·······································ssh/sshd_config:·······································with·a·user-specific | ||
| 36 | ·······································PermitRootLogin·no·····································account·provides | ||
| 37 | ······························································································individual | ||
| 10 | ······························································································ | 38 | ······························································································accountability·of |
| 39 | ······························································································actions·performed·on | ||
| 40 | ······························································································the·system·and·also | ||
| 41 | ······························································································helps·to·minimize | ||
| 42 | ······························································································direct·attack | ||
| 43 | ······························································································attempts·on·root's | ||
| 44 | ······························································································password. | ||
| 45 | ······························································································This·prevents | ||
| 46 | ······························································································attackers·with | ||
| 47 | ·······································Single-user·mode·is·intended·as·a·system·recovery······physical·access·from | ||
| 48 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | ||
| 49 | 3.1.1···Require·Authentication·for·····system·by·providing·a·boot·option·at·startup.··········security·on·the | ||
| 50 | 3.4.5···Single·User·Mode······································································machine·and·gaining | ||
| 51 | ·······································By·default,·single-user·mode·is·protected·by·requiring·root·access.·Such | ||
| 52 | ·······································a·password·and·is·set·in·/usr/lib/systemd/system/······accesses·are·further | ||
| 53 | ·······································rescue.service.········································prevented·by | ||
| 54 | ······························································································configuring·the | ||
| 55 | ······························································································bootloader·password. | ||
| 11 | ······························································································An·account·has·root | 56 | ······························································································An·account·has·root |
| 12 | ······························································································authority·if·it·has | 57 | ······························································································authority·if·it·has |
| 13 | ······························································································a·UID·of·0.·Multiple | 58 | ······························································································a·UID·of·0.·Multiple |
| 14 | ······························································································accounts·with·a·UID | 59 | ······························································································accounts·with·a·UID |
| 15 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | 60 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more |
| 16 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | 61 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for |
| 17 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | 62 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders |
| Offset 26, 85 lines modified | Offset 71, 51 lines modified | ||
| 26 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended | 71 | ·······································greater·than·"1000"·that·has·not·already·been··········sudo·is·recommended |
| 27 | ·······································assigned.··············································to·afford·multiple | 72 | ·······································assigned.··············································to·afford·multiple |
| 28 | ······························································································system | 73 | ······························································································system |
| 29 | ······························································································administrators | 74 | ······························································································administrators |
| 30 | ······························································································access·to·root | 75 | ······························································································access·to·root |
| 31 | ······························································································privileges·in·an | 76 | ······························································································privileges·in·an |
| 32 | ······························································································accountable·manner. | 77 | ······························································································accountable·manner. |
| 78 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 79 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 80 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 81 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 82 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 83 | ·······································vc/3···················································actions·taken·on·the | ||
| 84 | ·······································vc/4···················································system·using·the | ||
| 85 | ······························································································root·account. | ||
| 33 | ······························································································If·an·account·has·an | 86 | ······························································································If·an·account·has·an |
| 34 | ······························································································empty·password, | 87 | ······························································································empty·password, |
| 35 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | 88 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in |
| 36 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | 89 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands |
| 37 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | 90 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges |
| 38 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | 91 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. |
| 39 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | 92 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty |
| 40 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | 93 | ·······································prevent·logins·with·empty·passwords.···················passwords·should |
| 41 | ······························································································never·be·used·in | 94 | ······························································································never·be·used·in |
| 42 | ······························································································operational | 95 | ······························································································operational |
| 43 | ······························································································environments. | 96 | ······························································································environments. |
| 44 | ······························································································This·prevents | ||
| 45 | ······························································································attackers·with | ||
| 46 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | ||
| 47 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | ||
| 48 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | ||
| 49 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | ||
| 50 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | ||
| 51 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | ||
| 52 | ·······································emergency.service.·····································prevented·by | ||
| 53 | ······························································································configuring·the | ||
| 54 | ······························································································bootloader·password. | ||
| 55 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 56 | ·······································automatically·login·without·user·interaction·or | ||
| 57 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | ||
| 58 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | ||
| 59 | 3.1.1···Disable·GDM·Automatic·Login····authorized·to·use.·To·disable·user·ability·to··········authenticated·users | ||
| 60 | ·······································automatically·login·to·the·system,·set·the·············negatively·impacts | ||
| 61 | ·······································AutomaticLoginEnable·to·false·in·the·[daemon]·section··operating·system | ||
| 62 | ·······································in·/etc/gdm/custom.conf.·For·example:··················security. | ||
| 63 | ·······································[daemon] | ||
| 64 | ·······································AutomaticLoginEnable=false | ||
| 65 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | 97 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to |
| 66 | ·······································login·without·credentials·which·can·be·useful·for | 98 | ·······································login·without·credentials·which·can·be·useful·for |
| 67 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | 99 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict |
| 68 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | 100 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to |
| 69 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | 101 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users |
| 70 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | 102 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts |
| 71 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | 103 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system |
| 72 | ·······································etc/gdm/custom.conf.·For·example:······················security. | 104 | ·······································etc/gdm/custom.conf.·For·example:······················security. |
| 73 | ·······································[daemon] | 105 | ·······································[daemon] |
| Max diff block lines reached; 805441/819172 bytes (98.32%) of diff not shown. | |||
| Offset 4048, 15 lines modified | Offset 4048, 15 lines modified | ||
| 4048 | <tt>RekeyLimit</tt>. | 4048 | <tt>RekeyLimit</tt>. |
| 4049 | ··</td> | 4049 | ··</td> |
| 4050 | ··<td·xml:lang="en-US"> | 4050 | ··<td·xml:lang="en-US"> |
| 4051 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4051 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4052 | time-based·limit,·effects·of·potential·attacks·against | 4052 | time-based·limit,·effects·of·potential·attacks·against |
| 4053 | encryption·keys·are·limited. | 4053 | encryption·keys·are·limited. |
| 4054 | ··</td> | 4054 | ··</td> |
| 4055 | ··<td>var_ssh_client_rekey_limit_ | 4055 | ··<td>var_ssh_client_rekey_limit_time=1hour<br/>var_ssh_client_rekey_limit_size=1G</td> |
| 4056 | </tr> | 4056 | </tr> |
| 4057 | <tr> | 4057 | <tr> |
| 4058 | ··<td></td> | 4058 | ··<td></td> |
| 4059 | ··<td>CCE-83349-1</td> | 4059 | ··<td>CCE-83349-1</td> |
| 4060 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> | 4060 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> |
| 4061 | ··<td·xml:lang="en-US"> | 4061 | ··<td·xml:lang="en-US"> |
| 4062 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure | 4062 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure |
| Offset 4111, 15 lines modified | Offset 4111, 15 lines modified | ||
| 4111 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> | 4111 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> |
| 4112 | ··</td> | 4112 | ··</td> |
| 4113 | ··<td·xml:lang="en-US"> | 4113 | ··<td·xml:lang="en-US"> |
| 4114 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4114 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4115 | time-based·limit,·effects·of·potential·attacks·against | 4115 | time-based·limit,·effects·of·potential·attacks·against |
| 4116 | encryption·keys·are·limited. | 4116 | encryption·keys·are·limited. |
| 4117 | ··</td> | 4117 | ··</td> |
| 4118 | ··<td>var_rekey_limit_ | 4118 | ··<td>var_rekey_limit_size=1G<br/>var_rekey_limit_time=1hour</td> |
| 4119 | </tr> | 4119 | </tr> |
| 4120 | <tr> | 4120 | <tr> |
| 4121 | ··<td></td> | 4121 | ··<td></td> |
| 4122 | ··<td>CCE-82462-3</td> | 4122 | ··<td>CCE-82462-3</td> |
| 4123 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> | 4123 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> |
| 4124 | ··<td·xml:lang="en-US"> | 4124 | ··<td·xml:lang="en-US"> |
| 4125 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. | 4125 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. |
| Offset 3299, 16 lines modified | Offset 3299, 16 lines modified | ||
| 3299 | ······················································································································options,·which·can | 3299 | ······················································································································options,·which·can |
| 3300 | ······················································································································help·protect | 3300 | ······················································································································help·protect |
| 3301 | ······················································································································programs·which·use | 3301 | ······················································································································programs·which·use |
| 3302 | ······················································································································it. | 3302 | ······················································································································it. |
| 3303 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the | 3303 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the |
| 3304 | ·····························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the | 3304 | ·····························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the |
| 3305 | ·····CCE-···Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and | 3305 | ·····CCE-···Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and |
| 3306 | ·····82880-·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_ | 3306 | ·····82880-·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_time=1hour |
| 3307 | ·····6······renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_ | 3307 | ·····6······renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_size=1G |
| 3308 | ············for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks | 3308 | ············for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks |
| 3309 | ·····························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption | 3309 | ·····························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption |
| 3310 | ·····························containing·definition·of·RekeyLimit.·····················································keys·are·limited. | 3310 | ·····························containing·definition·of·RekeyLimit.·····················································keys·are·limited. |
| 3311 | ······················································································································Some·SSH | 3311 | ······················································································································Some·SSH |
| 3312 | ······················································································································implementations·use | 3312 | ······················································································································implementations·use |
| 3313 | ······················································································································the·openssl·library | 3313 | ······················································································································the·openssl·library |
| 3314 | ······················································································································for·entropy,·which | 3314 | ······················································································································for·entropy,·which |
| Offset 3359, 16 lines modified | Offset 3359, 16 lines modified | ||
| 3359 | ······················································································································generator·used·by | 3359 | ······················································································································generator·used·by |
| 3360 | ······················································································································SSH·would·be·known | 3360 | ······················································································································SSH·would·be·known |
| 3361 | ······················································································································to·potential | 3361 | ······················································································································to·potential |
| 3362 | ······················································································································attackers. | 3362 | ······················································································································attackers. |
| 3363 | ······················································································································By·decreasing·the | 3363 | ······················································································································By·decreasing·the |
| 3364 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the | 3364 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the |
| 3365 | ·····CCE-···Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and | 3365 | ·····CCE-···Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and |
| 3366 | ·····82177-·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_ | 3366 | ·····82177-·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_size=1G |
| 3367 | ·····7······renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_ | 3367 | ·····7······renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_time=1hour |
| 3368 | ·····························RekeyLimit·1G·1hour······································································potential·attacks | 3368 | ·····························RekeyLimit·1G·1hour······································································potential·attacks |
| 3369 | ······················································································································against·encryption | 3369 | ······················································································································against·encryption |
| 3370 | ······················································································································keys·are·limited. | 3370 | ······················································································································keys·are·limited. |
| 3371 | ······················································································································SSH·implementation | 3371 | ······················································································································SSH·implementation |
| 3372 | ······················································································································in·Red·Hat | 3372 | ······················································································································in·Red·Hat |
| 3373 | ······················································································································Enterprise·Linux·8 | 3373 | ······················································································································Enterprise·Linux·8 |
| 3374 | ······················································································································uses·the·openssl | 3374 | ······················································································································uses·the·openssl |
| Offset 24853, 18 lines modified | Offset 24853, 18 lines modified | ||
| 00061140:·616e·6420·656e·6162·6c69·6e67·0a74·696d··and·enabling.tim | 00061140:·616e·6420·656e·6162·6c69·6e67·0a74·696d··and·enabling.tim | ||
| 00061150:·652d·6261·7365·6420·6c69·6d69·742c·2065··e-based·limit,·e | 00061150:·652d·6261·7365·6420·6c69·6d69·742c·2065··e-based·limit,·e | ||
| 00061160:·6666·6563·7473·206f·6620·706f·7465·6e74··ffects·of·potent | 00061160:·6666·6563·7473·206f·6620·706f·7465·6e74··ffects·of·potent | ||
| 00061170:·6961·6c20·6174·7461·636b·7320·6167·6169··ial·attacks·agai | 00061170:·6961·6c20·6174·7461·636b·7320·6167·6169··ial·attacks·agai | ||
| 00061180:·6e73·740a·656e·6372·7970·7469·6f6e·206b··nst.encryption·k | 00061180:·6e73·740a·656e·6372·7970·7469·6f6e·206b··nst.encryption·k | ||
| 00061190:·6579·7320·6172·6520·6c69·6d69·7465·642e··eys·are·limited. | 00061190:·6579·7320·6172·6520·6c69·6d69·7465·642e··eys·are·limited. | ||
| 000611a0:·0a20·203c·2f74·643e·0a20·203c·7464·3e76··.··</td>.··<td>v | 000611a0:·0a20·203c·2f74·643e·0a20·203c·7464·3e76··.··</td>.··<td>v | ||
| 000611b0:·6172·5f72·656b·6579·5f6c·696d·6974·5f7 | 000611b0:·6172·5f72·656b·6579·5f6c·696d·6974·5f74··ar_rekey_limit_t | ||
| 000611c0:·697a·653d·3147·3c62·722f·3e76·6172·5f72··ize=1G<br/>var_r | |||
| 000611 | 000611c0:·696d·653d·3168·6f75·723c·6272·2f3e·7661··ime=1hour<br/>va | ||
| 000611d0:·725f·7265·6b65·795f·6c69·6d69·745f·7369··r_rekey_limit_si | |||
| 000611e0:· | 000611e0:·7a65·3d31·473c·2f74·643e·0a3c·2f74·723e··ze=1G</td>.</tr> | ||
| 000611f0:·0a3c·7472·3e0a·2020·3c74·643e·3c2f·7464··.<tr>.··<td></td | 000611f0:·0a3c·7472·3e0a·2020·3c74·643e·3c2f·7464··.<tr>.··<td></td | ||
| 00061200:·3e0a·2020·3c74·643e·4343·452d·3832·3436··>.··<td>CCE-8246 | 00061200:·3e0a·2020·3c74·643e·4343·452d·3832·3436··>.··<td>CCE-8246 | ||
| 00061210:·322d·333c·2f74·643e·0a20·203c·7464·3e53··2-3</td>.··<td>S | 00061210:·322d·333c·2f74·643e·0a20·203c·7464·3e53··2-3</td>.··<td>S | ||
| 00061220:·5348·2073·6572·7665·7220·7573·6573·2073··SH·server·uses·s | 00061220:·5348·2073·6572·7665·7220·7573·6573·2073··SH·server·uses·s | ||
| 00061230:·7472·6f6e·6720·656e·7472·6f70·7920·746f··trong·entropy·to | 00061230:·7472·6f6e·6720·656e·7472·6f70·7920·746f··trong·entropy·to | ||
| 00061240:·2073·6565·643c·2f74·643e·0a20·203c·7464···seed</td>.··<td | 00061240:·2073·6565·643c·2f74·643e·0a20·203c·7464···seed</td>.··<td | ||
| 00061250:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | 00061250:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US |
| Offset 7818, 16 lines modified | Offset 7818, 16 lines modified | ||
| 7818 | ·····································corresponding·private·key.····························system·where·the | 7818 | ·····································corresponding·private·key.····························system·where·the |
| 7819 | ···························································································associated·public | 7819 | ···························································································associated·public |
| 7820 | ···························································································key·has·been | 7820 | ···························································································key·has·been |
| 7821 | ···························································································installed. | 7821 | ···························································································installed. |
| 7822 | ·····································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the | 7822 | ·····································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the |
| 7823 | ·····································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the | 7823 | ·····································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the |
| 7824 | ········CCE-···Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and | 7824 | ········CCE-···Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and |
| 7825 | ········82177-·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_ | 7825 | ········82177-·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_time=1hour |
| 7826 | ········7······renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_ | 7826 | ········7······renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_size=1G |
| 7827 | ·····································following·line·in·/etc/ssh/sshd_config:···············potential·attacks | 7827 | ·····································following·line·in·/etc/ssh/sshd_config:···············potential·attacks |
| 7828 | ·····································RekeyLimit·1G·1hour···································against·encryption | 7828 | ·····································RekeyLimit·1G·1hour···································against·encryption |
| 7829 | ···························································································keys·are·limited. | 7829 | ···························································································keys·are·limited. |
| 7830 | ···························································································SSH·implementation | 7830 | ···························································································SSH·implementation |
| 7831 | ···························································································in·Red·Hat | 7831 | ···························································································in·Red·Hat |
| 7832 | ···························································································Enterprise·Linux·8 | 7832 | ···························································································Enterprise·Linux·8 |
| 7833 | ···························································································uses·the·openssl | 7833 | ···························································································uses·the·openssl |
| Offset 68, 14332 lines modified | Offset 68, 14332 lines modified | ||
| 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | ||
| 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | ||
| 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | ||
| 00000460:·2020·3c74·643e·4155·2d32·2864·293c·6272····<td>AU-2(d)<br | 00000460:·2020·3c74·643e·4155·2d32·2864·293c·6272····<td>AU-2(d)<br | ||
| 00000470:·2f3e·4155·2d31·3228·6329·3c62·722f·3e41··/>AU-12(c)<br/>A | 00000470:·2f3e·4155·2d31·3228·6329·3c62·722f·3e41··/>AU-12(c)<br/>A | ||
| 00000480:·432d·3628·3929·3c62·722f·3e43·4d2d·3628··C-6(9)<br/>CM-6( | 00000480:·432d·3628·3929·3c62·722f·3e43·4d2d·3628··C-6(9)<br/>CM-6( | Diff chunk too large, falling back to line-by-line diff (2408 lines added, 2408 lines removed) | |
| 00000490:·6129·3c2f·7464·3e0a·2020·2020·2020·3c74··a)</td>.······<t | 00000490:·6129·3c2f·7464·3e0a·2020·2020·2020·3c74··a)</td>.······<t | ||
| 000004a0:·643e· | 000004a0:·643e·5265·636f·7264·2041·7474·656d·7074··d>Record·Attempt | ||
| 000004b0:· | 000004b0:·7320·746f·2041·6c74·6572·2054·696d·6520··s·to·Alter·Time· | ||
| 000004c0:· | 000004c0:·5468·726f·7567·6820·7374·696d·653c·2f74··Through·stime</t | ||
| 000004d0:·6 | 000004d0:·643e·0a20·2020·2020·203c·7464·2078·6d6c··d>.······<td·xml | ||
| 000004e0:· | 000004e0:·3a6c·616e·673d·2265·6e2d·5553·223e·0a20··:lang="en-US">.· | ||
| 000004f0:· | 000004f0:·2020·2020·2020·2049·6620·7468·6520·3c74·········If·the·<t | ||
| 00000500:· | 00000500:·743e·6175·6469·7464·3c2f·7474·3e20·6461··t>auditd</tt>·da | ||
| 00000510:· | 00000510:·656d·6f6e·2069·7320·636f·6e66·6967·7572··emon·is·configur | ||
| 00000520:·6 | 00000520:·6564·2074·6f20·7573·6520·7468·650a·3c74··ed·to·use·the.<t | ||
| 00000530:·7 | 00000530:·743e·6175·6765·6e72·756c·6573·3c2f·7474··t>augenrules</tt | ||
| 00000540:· | 00000540:·3e20·7072·6f67·7261·6d20·746f·2072·6561··>·program·to·rea | ||
| 00000550:·6 | 00000550:·6420·6175·6469·7420·7275·6c65·7320·6475··d·audit·rules·du | ||
| 00000560:· | 00000560:·7269·6e67·2064·6165·6d6f·6e20·7374·6172··ring·daemon·star | ||
| 00000570:· | 00000570:·7475·7020·2874·6865·0a64·6566·6175·6c74··tup·(the.default | ||
| 00000580:·2 | 00000580:·292c·2061·6464·2074·6865·2066·6f6c·6c6f··),·add·the·follo | ||
| 00000590:· | 00000590:·7769·6e67·206c·696e·6520·746f·2061·2066··wing·line·to·a·f | ||
| 000005a0:·69 | 000005a0:·696c·6520·7769·7468·2073·7566·6669·7820··ile·with·suffix· | ||
| 000005b0:· | 000005b0:·3c74·743e·2e72·756c·6573·3c2f·7474·3e20··<tt>.rules</tt>· | ||
| 000005c0:·6 | 000005c0:·696e·2074·6865·0a64·6972·6563·746f·7279··in·the.directory | ||
| 000005d0:· | 000005d0:·203c·7474·3e2f·6574·632f·6175·6469·742f···<tt>/etc/audit/ | ||
| 000005e0:· | 000005e0:·7275·6c65·732e·643c·2f74·743e·2066·6f72··rules.d</tt>·for | ||
| 000005f0:· | 000005f0:·2062·6f74·6820·3332·2062·6974·2061·6e64···both·32·bit·and | ||
| 00000600:· | 00000600:·2036·3420·6269·7420·7379·7374·656d·733a···64·bit·systems: | ||
| 00000610:· | 00000610:·0a3c·7072·653e·2d61·2061·6c77·6179·732c··.<pre>-a·always, | ||
| 00000620:·6 | 00000620:·6578·6974·202d·4620·6172·6368·3d62·3332··exit·-F·arch=b32 | ||
| 00000630:· | 00000630:·202d·5320·7374·696d·6520·2d46·206b·6579···-S·stime·-F·key | ||
| 00000640:·6 | 00000640:·3d61·7564·6974·5f74·696d·655f·7275·6c65··=audit_time_rule | ||
| 00000650:· | 00000650:·733c·2f70·7265·3e0a·5369·6e63·6520·7468··s</pre>.Since·th | ||
| 00000660:·6 | 00000660:·6520·3634·2062·6974·2076·6572·7369·6f6e··e·64·bit·version | ||
| 00000670:· | 00000670:·206f·6620·7468·6520·2273·7469·6d65·2220···of·the·"stime"· | ||
| 00000680:· | 00000680:·7379·7374·656d·2063·616c·6c20·6973·206e··system·call·is·n | ||
| 00000690:·7 | 00000690:·6f74·2064·6566·696e·6564·2069·6e20·7468··ot·defined·in·th | ||
| 000006a0:· | 000006a0:·6520·6175·6469·740a·6c6f·6f6b·7570·2074··e·audit.lookup·t | ||
| 000006b0:· | 000006b0:·6162·6c65·2c20·7468·6520·636f·7272·6573··able,·the·corres | ||
| 000006c0:·7 | 000006c0:·706f·6e64·696e·6720·222d·4620·6172·6368··ponding·"-F·arch | ||
| 000006d0:·3d | 000006d0:·3d62·3634·2220·666f·726d·206f·6620·7468··=b64"·form·of·th | ||
| 000006e0:·697 | 000006e0:·6973·2072·756c·6520·6973·206e·6f74·2065··is·rule·is·not·e | ||
| 000006f0:· | 000006f0:·7870·6563·7465·640a·746f·2062·6520·6465··xpected.to·be·de | ||
| 00000700:· | 00000700:·6669·6e65·6420·6f6e·2036·3420·6269·7420··fined·on·64·bit· | ||
| 00000710:· | 00000710:·7379·7374·656d·7320·2874·6865·2061·666f··systems·(the·afo | ||
| 00000720:· | 00000720:·7265·6d65·6e74·696f·6e65·6420·222d·4620··rementioned·"-F· | ||
| 00000730:·7 | 00000730:·6172·6368·3d62·3332·2220·7374·696d·6520··arch=b32"·stime· | ||
| 00000740:·7 | 00000740:·7275·6c65·0a66·6f72·6d20·6974·7365·6c66··rule.form·itself | ||
| 00000750:· | 00000750:·2069·7320·7375·6666·6963·6965·6e74·2066···is·sufficient·f | ||
| 00000760:·6 | 00000760:·6f72·2062·6f74·6820·3332·2062·6974·2061··or·both·32·bit·a | ||
| 00000770:· | 00000770:·6e64·2036·3420·6269·7420·7379·7374·656d··nd·64·bit·system | ||
| 00000780:· | 00000780:·7329·2e20·4966·2074·6865·0a3c·7474·3e61··s).·If·the.<tt>a | ||
| 00000790:·7 | 00000790:·7564·6974·643c·2f74·743e·2064·6165·6d6f··uditd</tt>·daemo | ||
| 000007a0:·6 | 000007a0:·6e20·6973·2063·6f6e·6669·6775·7265·6420··n·is·configured· | ||
| 000007b0:· | 000007b0:·746f·2075·7365·2074·6865·203c·7474·3e61··to·use·the·<tt>a | ||
| 000007c0:·7 | 000007c0:·7564·6974·6374·6c3c·2f74·743e·2075·7469··uditctl</tt>·uti | ||
| 000007d0:· | 000007d0:·6c69·7479·2074·6f0a·7265·6164·2061·7564··lity·to.read·aud | ||
| 000007e0:·6 | 000007e0:·6974·2072·756c·6573·2064·7572·696e·6720··it·rules·during· | ||
| 000007f0:· | 000007f0:·6461·656d·6f6e·2073·7461·7274·7570·2c20··daemon·startup,· | ||
| 00000800:· | 00000800:·6164·6420·7468·6520·666f·6c6c·6f77·696e··add·the·followin | ||
| 00000810:·6 | 00000810:·6720·6c69·6e65·2074·6f0a·3c74·743e·2f65··g·line·to.<tt>/e | ||
| 00000820:· | 00000820:·7463·2f61·7564·6974·2f61·7564·6974·2e72··tc/audit/audit.r | ||
| 00000830:· | 00000830:·756c·6573·3c2f·7474·3e20·6669·6c65·2066··ules</tt>·file·f | ||
| 00000840:· | 00000840:·6f72·2062·6f74·6820·3332·2062·6974·2061··or·both·32·bit·a | ||
| 00000850:· | 00000850:·6e64·2036·3420·6269·7420·7379·7374·656d··nd·64·bit·system | ||
| 00000860:· | 00000860:·733a·0a3c·7072·653e·2d61·2061·6c77·6179··s:.<pre>-a·alway | ||
| 00000870:· | 00000870:·732c·6578·6974·202d·4620·6172·6368·3d62··s,exit·-F·arch=b | ||
| 00000880:·20 | 00000880:·3332·202d·5320·7374·696d·6520·2d46·206b··32·-S·stime·-F·k | ||
| 00000890:·6 | 00000890:·6579·3d61·7564·6974·5f74·696d·655f·7275··ey=audit_time_ru | ||
| 000008a0:·6 | 000008a0:·6c65·733c·2f70·7265·3e0a·5369·6e63·6520··les</pre>.Since· | ||
| 000008b0:· | 000008b0:·7468·6520·3634·2062·6974·2076·6572·7369··the·64·bit·versi | ||
| 000008c0:· | 000008c0:·6f6e·206f·6620·7468·6520·2273·7469·6d65··on·of·the·"stime | ||
| 000008d0:· | 000008d0:·2220·7379·7374·656d·2063·616c·6c20·6973··"·system·call·is | ||
| 000008e0:· | 000008e0:·206e·6f74·2064·6566·696e·6564·2069·6e20···not·defined·in· | ||
| 000008f0:· | 000008f0:·7468·6520·6175·6469·740a·6c6f·6f6b·7570··the·audit.lookup | ||
| 00000900:· | 00000900:·2074·6162·6c65·2c20·7468·6520·636f·7272···table,·the·corr | ||
| 00000910:·6 | 00000910:·6573·706f·6e64·696e·6720·222d·4620·6172··esponding·"-F·ar | ||
| 00000920:· | 00000920:·6368·3d62·3634·2220·666f·726d·206f·6620··ch=b64"·form·of· | ||
| 00000930:· | 00000930:·7468·6973·2072·756c·6520·6973·206e·6f74··this·rule·is·not | ||
| 00000940:· | 00000940:·2065·7870·6563·7465·640a·746f·2062·6520···expected.to·be· | ||
| 00000950:· | 00000950:·6465·6669·6e65·6420·6f6e·2036·3420·6269··defined·on·64·bi | ||
| 00000960:· | 00000960:·7420·7379·7374·656d·7320·2874·6865·2061··t·systems·(the·a | ||
| 00000970:·66 | 00000970:·666f·7265·6d65·6e74·696f·6e65·6420·222d··forementioned·"- | ||
| 00000980:· | 00000980:·4620·6172·6368·3d62·3332·2220·7374·696d··F·arch=b32"·stim | ||
| 00000990:· | 00000990:·6520·7275·6c65·0a66·6f72·6d20·6974·7365··e·rule.form·itse | ||
| 000009a0:·6 | 000009a0:·6c66·2069·7320·7375·6666·6963·6965·6e74··lf·is·sufficient | ||
| 000009b0:·2066·72 | 000009b0:·2066·6f72·2062·6f74·6820·3332·2062·6974···for·both·32·bit | ||
| 000009c0:· | 000009c0:·2061·6e64·2036·3420·6269·7420·7379·7374···and·64·bit·syst | ||
| 000009d0:· | 000009d0:·656d·7329·2e20·5468·6520·2d6b·206f·7074··ems).·The·-k·opt | ||
| 000009e0:·6 | 000009e0:·696f·6e0a·616c·6c6f·7773·2066·6f72·2074··ion.allows·for·t | ||
| 000009f0:·6 | 000009f0:·6865·2073·7065·6369·6669·6361·7469·6f6e··he·specification | ||
| 00000a00:· | 00000a00:·206f·6620·6120·6b65·7920·696e·2073·7472···of·a·key·in·str | ||
| 00000a10:· | 00000a10:·696e·6720·666f·726d·2074·6861·7420·6361··ing·form·that·ca | ||
| 00000a20:· | 00000a20:·6e20·6265·2075·7365·6420·666f·720a·6265··n·be·used·for.be | ||
| 00000a30:·776 | 00000a30:·7474·6572·2072·6570·6f72·7469·6e67·2063··tter·reporting·c | ||
| 00000a40:· | 00000a40:·6170·6162·696c·6974·7920·7468·726f·7567··apability·throug | ||
| 00000a50:·6 | 00000a50:·6820·6175·7365·6172·6368·2061·6e64·2061··h·ausearch·and·a | ||
| 00000a60:· | 00000a60:·7572·6570·6f72·742e·204d·756c·7469·706c··ureport.·Multipl | ||
| 00000a70:·65 | 00000a70:·6520·7379·7374·656d·0a63·616c·6c73·2063··e·system.calls·c | ||
| 00000a80:·6 | 00000a80:·616e·2062·6520·6465·6669·6e65·6420·6f6e··an·be·defined·on | ||
| 00000a90:· | 00000a90:·2074·6865·2073·616d·6520·6c69·6e65·2074···the·same·line·t | ||
| 00000aa0:·6f | 00000aa0:·6f20·7361·7665·2073·7061·6365·2069·6620··o·save·space·if· | ||
| 00000ab0:·6 | 00000ab0:·6465·7369·7265·642c·2062·7574·2069·7320··desired,·but·is· | ||
| 00000ac0:·6 | 00000ac0:·6e6f·740a·7265·7175·6972·6564·2e20·5365··not.required.·Se | ||
| 00000ad0:·6 | 00000ad0:·6520·616e·2065·7861·6d70·6c65·206f·6620··e·an·example·of· | ||
| 00000ae0:· | 00000ae0:·6d75·6c74·6970·6c65·2063·6f6d·6269·6e65··multiple·combine | ||
| 00000af0:· | 00000af0:·6420·7379·7374·656d·2063·616c·6c73·3a0a··d·system·calls:. | ||
| 00000b00:· | 00000b00:·3c70·7265·3e2d·6120·616c·7761·7973·2c65··<pre>-a·always,e | ||
| 00000b10:· | 00000b10:·7869·7420·2d46·2061·7263·683d·6236·3420··xit·-F·arch=b64· | ||
| 00000b20:·2 | 00000b20:·2d53·2061·646a·7469·6d65·782c·7365·7474··-S·adjtimex,sett | ||
| 00000b30:· | 00000b30:·696d·656f·6664·6179·202d·4620·6b65·793d··imeofday·-F·key= | ||
| 00000b40:·6 | 00000b40:·6175·6469·745f·7469·6d65·5f72·756c·6573··audit_time_rules | ||
| 00000b50:· | 00000b50:·3c2f·7072·653e·0a20·2020·2020·203c·2f74··</pre>.······</t | ||
| 00000b60:· | 00000b60:·643e·0a20·2020·2020·203c·7464·2078·6d6c··d>.······<td·xml | ||
| 00000b70:· | 00000b70:·3a6c·616e·673d·2265·6e2d·5553·223e·0a20··:lang="en-US">.· | ||
| 00000b80:· | 00000b80:·2020·2020·2020·2041·7262·6974·7261·7279·········Arbitrary | ||
| 00000b90:·20 | 00000b90:·2063·6861·6e67·6573·2074·6f20·7468·6520···changes·to·the· | ||
| 00000ba0:·7973 | 00000ba0:·7379·7374·656d·2074·696d·6520·6361·6e20··system·time·can· | ||
| 00000bb0:·6 | 00000bb0:·6265·2075·7365·6420·746f·206f·6266·7573··be·used·to·obfus | ||
| 00000bc0:·6 | 00000bc0:·6361·7465·0a6e·6566·6172·696f·7573·2061··cate.nefarious·a | ||
| 00000bd0:·6 | 00000bd0:·6374·6976·6974·6965·7320·696e·206c·6f67··ctivities·in·log | ||
| 00000be0:·20 | 00000be0:·2066·696c·6573·2c20·6173·2077·656c·6c20···files,·as·well· | ||
| 00000bf0:·20 | 00000bf0:·6173·2074·6f20·636f·6e66·7573·6520·6e65··as·to·confuse·ne | ||
| 00000c00:·74 | 00000c00:·7477·6f72·6b20·7365·7276·6963·6573·2074··twork·services·t | ||
| Max diff block lines reached; 6916608/7249490 bytes (95.41%) of diff not shown. | |||
| Offset 41, 60 lines modified | Offset 41, 46 lines modified | ||
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>Req-1.3</td> | 47 | ······<td>Req-1.3</td> |
| 48 | ······<td>Set·configuration·for· | 48 | ······<td>Set·configuration·for·loopback·traffic</td> |
| 49 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 50 | ········Configure·the·loopback·interface·to·accept·traffic. | 50 | ········Configure·the·loopback·interface·to·accept·traffic. |
| 51 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | 51 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback |
| 52 | network. | 52 | network. |
| 53 | ······</td> | 53 | ······</td> |
| 54 | ······<td·xml:lang="en-US"> | 54 | ······<td·xml:lang="en-US"> |
| 55 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | 55 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is |
| 56 | typically·critical·to·operation·of·the·system.·The·loopback·interface | 56 | typically·critical·to·operation·of·the·system.·The·loopback·interface |
| 57 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 57 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 58 | 58 | other·interfaces·should·ignore·traffic·on·this·network·as·an | |
| 59 | anti-spoofing·measure. | 59 | anti-spoofing·measure. |
| 60 | ······</td> | 60 | ······</td> |
| 61 | ····</tr> | 61 | ····</tr> |
| 62 | ····<tr> | 62 | ····<tr> |
| 63 | ······<td>Req-1.3</td> | 63 | ······<td>Req-1.3</td> |
| 64 | ······<td>Set·configuration·for·loopback·traffic</td> | 64 | ······<td>Set·configuration·for·IPv6·loopback·traffic</td> |
| 65 | ······<td·xml:lang="en-US"> | 65 | ······<td·xml:lang="en-US"> |
| 66 | ········Configure·the·loopback·interface·to·accept·traffic. | 66 | ········Configure·the·loopback·interface·to·accept·traffic. |
| 67 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | 67 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback |
| 68 | network. | 68 | network. |
| 69 | ······</td> | 69 | ······</td> |
| 70 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 71 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | 71 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is |
| 72 | typically·critical·to·operation·of·the·system.·The·loopback·interface | 72 | typically·critical·to·operation·of·the·system.·The·loopback·interface |
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen, |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 95 | ······<td·xml:lang="en-US"> | 81 | ······<td·xml:lang="en-US"> |
| 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 98 | GRUB2·command·line·for·the·Linux·operating·system. | 84 | GRUB2·command·line·for·the·Linux·operating·system. |
| 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 105, 14 lines modified | Offset 91, 28 lines modified | ||
| 105 | ······</td> | 91 | ······</td> |
| 106 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 108 | the·vulnerability·to·exploitation. | 94 | the·vulnerability·to·exploitation. |
| 109 | ······</td> | 95 | ······</td> |
| 110 | ····</tr> | 96 | ····</tr> |
| 111 | ····<tr> | 97 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 14 lines modified | Offset 157, 28 lines modified | ||
| 157 | ······<td·xml:lang="en-US"> | 157 | ······<td·xml:lang="en-US"> |
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all |
| 159 | packets·to·these·ports. | 159 | packets·to·these·ports. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td>Install·iptables·Package</td> | ||
| 165 | ······<td·xml:lang="en-US"> | ||
| 166 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 167 | <pre> | ||
| 168 | $·sudo·yum·install·iptables</pre> | ||
| 169 | ······</td> | ||
| 170 | ······<td·xml:lang="en-US"> | ||
| 171 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 172 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 173 | masquerading,·etc. | ||
| 174 | ······</td> | ||
| 175 | ····</tr> | ||
| 176 | ····<tr> | ||
| 177 | ······<td>Req-1.4.1</td> | ||
| 164 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 178 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 165 | ······<td·xml:lang="en-US"> | 179 | ······<td·xml:lang="en-US"> |
| 166 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 180 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| 167 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> | 181 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.tcp_syncookies·=·1</pre> |
| 168 | ······</td> | 182 | ······</td> |
| 169 | ······<td·xml:lang="en-US"> | 183 | ······<td·xml:lang="en-US"> |
| 170 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a | 184 | ········A·TCP·SYN·flood·attack·can·cause·a·denial·of·service·by·filling·a |
| Offset 173, 28 lines modified | Offset 187, 14 lines modified | ||
| 173 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 187 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 174 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 188 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 175 | enables·the·system·to·continue·servicing·valid·connection·requests. | 189 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 176 | ······</td> | 190 | ······</td> |
| 177 | ····</tr> | 191 | ····</tr> |
| 178 | ····<tr> | 192 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 193 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Install·iptables·Package</td> | ||
| Max diff block lines reached; 306676/313057 bytes (97.96%) of diff not shown. | |||
| Offset 8, 15 lines modified | Offset 8, 15 lines modified | ||
| 8 | ····················································································generated·between | 8 | ····················································································generated·between |
| 9 | ····················································································processes·on | 9 | ····················································································processes·on |
| 10 | ····················································································machine·and·is | 10 | ····················································································machine·and·is |
| 11 | ····················································································typically·critical | 11 | ····················································································typically·critical |
| 12 | ····················································································to·operation·of·the | 12 | ····················································································to·operation·of·the |
| 13 | ····················································································system.·The | 13 | ····················································································system.·The |
| 14 | ·········Set·configuration···Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | 14 | ·········Set·configuration···Configure·the·loopback·interface·to·accept·traffic.····loopback·interface |
| 15 | Req-1.3··for· | 15 | Req-1.3··for·loopback········Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place |
| 16 | ·········traffic·············loopback·network.······································that·loopback | 16 | ·········traffic·············loopback·network.······································that·loopback |
| 17 | ····················································································network·traffic | 17 | ····················································································network·traffic |
| 18 | ····················································································should·be·seen,·all | 18 | ····················································································should·be·seen,·all |
| 19 | ····················································································other·interfaces | 19 | ····················································································other·interfaces |
| 20 | ····················································································should·ignore | 20 | ····················································································should·ignore |
| 21 | ····················································································traffic·on·this | 21 | ····················································································traffic·on·this |
| 22 | ····················································································network·as·an·anti- | 22 | ····················································································network·as·an·anti- |
| Offset 25, 23 lines modified | Offset 25, 35 lines modified | ||
| 25 | ····················································································generated·between | 25 | ····················································································generated·between |
| 26 | ····················································································processes·on | 26 | ····················································································processes·on |
| 27 | ····················································································machine·and·is | 27 | ····················································································machine·and·is |
| 28 | ····················································································typically·critical | 28 | ····················································································typically·critical |
| 29 | ····················································································to·operation·of·the | 29 | ····················································································to·operation·of·the |
| 30 | ····················································································system.·The | 30 | ····················································································system.·The |
| 31 | ·········Set·configuration···Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | 31 | ·········Set·configuration···Configure·the·loopback·interface·to·accept·traffic.····loopback·interface |
| 32 | Req-1.3··for·loopback | 32 | Req-1.3··for·IPv6·loopback···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place |
| 33 | ·········traffic·············loopback·network.······································that·loopback | 33 | ·········traffic·············loopback·network.······································that·loopback |
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 41 | ····················································································Routing·protocol | 53 | ····················································································Routing·protocol |
| 42 | ····················································································daemons·are | 54 | ····················································································daemons·are |
| 43 | ····················································································typically·used·on | 55 | ····················································································typically·used·on |
| 44 | ····················································································routers·to·exchange | 56 | ····················································································routers·to·exchange |
| 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 49, 26 lines modified | Offset 61, 14 lines modified | ||
| 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 50 | ·····························sysctl.d:··············································required,·system | 62 | ·····························sysctl.d:··············································required,·system |
| 51 | ·····························net.ipv4.ip_forward·=·0································network·information | 63 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 52 | ····················································································may·be | 64 | ····················································································may·be |
| 53 | ····················································································unnecessarily | 65 | ····················································································unnecessarily |
| 54 | ····················································································transmitted·across | 66 | ····················································································transmitted·across |
| 55 | ····················································································the·network. | 67 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 14 lines modified | Offset 112, 23 lines modified | ||
| 112 | ····················································································Without·a·firewall | 112 | ····················································································Without·a·firewall |
| 113 | ····················································································rule·configured·for | 113 | ····················································································rule·configured·for |
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default |
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy |
| 116 | ·········open·ports·································································will·drop·all | 116 | ·········open·ports·································································will·drop·all |
| 117 | ····················································································packets·to·these | 117 | ····················································································packets·to·these |
| 118 | ····················································································ports. | 118 | ····················································································ports. |
| 119 | ····················································································iptables·controls | ||
| 120 | ····················································································the·Linux·kernel | ||
| 121 | ····················································································network·packet | ||
| 122 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 123 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 124 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 125 | ····················································································set·up·firewalls | ||
| 126 | ····················································································and·IP | ||
| 127 | ····················································································masquerading,·etc. | ||
| 119 | ····················································································A·TCP·SYN·flood | 128 | ····················································································A·TCP·SYN·flood |
| 120 | ····················································································attack·can·cause·a | 129 | ····················································································attack·can·cause·a |
| 121 | ····················································································denial·of·service | 130 | ····················································································denial·of·service |
| 122 | ····················································································by·filling·a | 131 | ····················································································by·filling·a |
| 123 | ····················································································system's·TCP | 132 | ····················································································system's·TCP |
| 124 | ····················································································connection·table | 133 | ····················································································connection·table |
| 125 | ····················································································with·connections·in | 134 | ····················································································with·connections·in |
| Offset 138, 23 lines modified | Offset 147, 14 lines modified | ||
| 138 | ····················································································flood·condition·is | 147 | ····················································································flood·condition·is |
| 139 | ····················································································detected,·and | 148 | ····················································································detected,·and |
| 140 | ····················································································enables·the·system | 149 | ····················································································enables·the·system |
| 141 | ····················································································to·continue | 150 | ····················································································to·continue |
| 142 | ····················································································servicing·valid | 151 | ····················································································servicing·valid |
| 143 | ····················································································connection | 152 | ····················································································connection |
| 144 | ····················································································requests. | 153 | ····················································································requests. |
| 145 | ····················································································iptables·controls | ||
| 146 | ····················································································the·Linux·kernel | ||
| 147 | ····················································································network·packet | ||
| 148 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 149 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 150 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 151 | ····················································································set·up·firewalls | ||
| 152 | ····················································································and·IP | ||
| 153 | ····················································································masquerading,·etc. | ||
| 154 | ····················································································Loopback·traffic·is | 154 | ····················································································Loopback·traffic·is |
| 155 | ····················································································generated·between | 155 | ····················································································generated·between |
| 156 | ····················································································processes·on | 156 | ····················································································processes·on |
| 157 | ····················································································machine·and·is | 157 | ····················································································machine·and·is |
| 158 | ····················································································typically·critical | 158 | ····················································································typically·critical |
| 159 | ····················································································to·operation·of·the | 159 | ····················································································to·operation·of·the |
| 160 | ····················································································system.·The | 160 | ····················································································system.·The |
| Offset 187, 14 lines modified | Offset 187, 48 lines modified | ||
| Max diff block lines reached; 500349/512797 bytes (97.57%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="2024-11-06T | 3 | ··<xccdf-1.2:version·time="2024-11-06T22:34:53.063704+00:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V1R14. | 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V1R14. |
| 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·DISA·recognizes·this | 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·DISA·recognizes·this |
| 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of | 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of |
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-al2023-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-al2023-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-al2023-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-al2023-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:amazon_linux:2023"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:amazon_linux:2023"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Linux·2023</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Linux·2023</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml">oval:ssg-installed_OS_is_al2023:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml">oval:ssg-installed_OS_is_al2023:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-al2023-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-al2023-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2024-11-0 | 36 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of | 40 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 105, 163 lines modified | Offset 105, 163 lines modified | ||
| 105 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 105 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 106 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 106 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 107 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 110 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 110 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 111 | ······<cpe-lang:platform-specification> | 111 | ······<cpe-lang:platform-specification> |
| 112 | ········<cpe-lang:platform·id="package_ | 112 | ········<cpe-lang:platform·id="package_bash"> |
| 113 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 114 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 115 | ··········</cpe-lang:logical-test> | ||
| 116 | ········</cpe-lang:platform> | ||
| 117 | ········<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 118 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 119 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 120 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 121 | ············</cpe-lang:logical-test> | ||
| 122 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 123 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 124 | ············</cpe-lang:logical-test> | ||
| 125 | ··········</cpe-lang:logical-test> | ||
| 126 | ········</cpe-lang:platform> | ||
| 127 | ········<cpe-lang:platform·id="package_systemd"> | ||
| 128 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 114 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 130 | ··········</cpe-lang:logical-test> | 115 | ··········</cpe-lang:logical-test> |
| 131 | ········</cpe-lang:platform> | 116 | ········</cpe-lang:platform> |
| 132 | ········<cpe-lang:platform·id="package_p | 117 | ········<cpe-lang:platform·id="package_pam"> |
| 133 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_p | 119 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 135 | ··········</cpe-lang:logical-test> | 120 | ··········</cpe-lang:logical-test> |
| 136 | ········</cpe-lang:platform> | 121 | ········</cpe-lang:platform> |
| 137 | ········<cpe-lang:platform·id="machine_and_mount_home"> | 122 | ········<cpe-lang:platform·id="machine_and_mount_home"> |
| 138 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 124 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 141 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 142 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 143 | ········<cpe-lang:platform·id="g | 128 | ········<cpe-lang:platform·id="package_dnf"> |
| 144 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 146 | ··········</cpe-lang:logical-test> | 131 | ··········</cpe-lang:logical-test> |
| 147 | ········</cpe-lang:platform> | 132 | ········</cpe-lang:platform> |
| 148 | ········<cpe-lang:platform·id=" | 133 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 149 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 151 | ··········</cpe-lang:logical-test> | 136 | ··········</cpe-lang:logical-test> |
| 152 | ········</cpe-lang:platform> | 137 | ········</cpe-lang:platform> |
| 153 | ········<cpe-lang:platform·id="machine"> | 138 | ········<cpe-lang:platform·id="machine_and_mount_var-tmp"> |
| 154 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 156 | ··········</cpe-lang:logical-test> | 142 | ··········</cpe-lang:logical-test> |
| 157 | ········</cpe-lang:platform> | 143 | ········</cpe-lang:platform> |
| 158 | ········<cpe-lang:platform·id=" | 144 | ········<cpe-lang:platform·id="package_sudo"> |
| 159 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 161 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 163 | ··········</cpe-lang:logical-test> | 147 | ··········</cpe-lang:logical-test> |
| 164 | ········</cpe-lang:platform> | 148 | ········</cpe-lang:platform> |
| 165 | ········<cpe-lang:platform·id=" | 149 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 166 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 150 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 151 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 168 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_tmp:def:1"/> | ||
| 169 | ··········</cpe-lang:logical-test> | 152 | ··········</cpe-lang:logical-test> |
| 170 | ········</cpe-lang:platform> | 153 | ········</cpe-lang:platform> |
| 171 | ········<cpe-lang:platform·id="machine_and_mount_var-log-audit"> | 154 | ········<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 172 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 155 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 156 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> | 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> |
| 175 | ··········</cpe-lang:logical-test> | 158 | ··········</cpe-lang:logical-test> |
| 176 | ········</cpe-lang:platform> | 159 | ········</cpe-lang:platform> |
| 177 | ········<cpe-lang:platform·id="package_audit"> | 160 | ········<cpe-lang:platform·id="package_audit"> |
| 178 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 180 | ··········</cpe-lang:logical-test> | 163 | ··········</cpe-lang:logical-test> |
| 181 | ········</cpe-lang:platform> | 164 | ········</cpe-lang:platform> |
| 165 | ········<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 182 | ········<cpe-lang:platform·id="package_firewalld"> | ||
| 183 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 184 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 185 | ··········</cpe-lang:logical-test> | ||
| 186 | ········</cpe-lang:platform> | ||
| 187 | ········<cpe-lang:platform·id="package_chrony"> | ||
| 188 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 189 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-p | 168 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 169 | ············</cpe-lang:logical-test> | ||
| 170 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 171 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 172 | ············</cpe-lang:logical-test> | ||
| 190 | ··········</cpe-lang:logical-test> | 173 | ··········</cpe-lang:logical-test> |
| 191 | ········</cpe-lang:platform> | 174 | ········</cpe-lang:platform> |
| 192 | ········<cpe-lang:platform·id="machine_and_service_disabled_iptables_and_service_disabled_ufw"> | 175 | ········<cpe-lang:platform·id="machine_and_service_disabled_iptables_and_service_disabled_ufw"> |
| 193 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 194 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 195 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_iptables:def:1"/> | 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_iptables:def:1"/> |
| 196 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 197 | ··········</cpe-lang:logical-test> | 180 | ··········</cpe-lang:logical-test> |
| 198 | ········</cpe-lang:platform> | 181 | ········</cpe-lang:platform> |
| Max diff block lines reached; 1619321/1632022 bytes (99.22%) of diff not shown. | |||
| Offset 3, 6247 lines modified | Offset 3, 6768 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_d_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Verify·Owner·on·cron.d</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_d_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_monthly_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Owner·on·cron.monthly</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_monthly_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-package_openldap-clients_removed_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Ensure·LDAP·client·is·not·installed</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-package_openldap-clients_removed_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_passwd_ocil:questionnaire:1"> | ||
| 29 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/passwd</ocil:title> | ||
| 30 | ······<ocil:actions> | ||
| 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_passwd_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_shadow_ocil:questionnaire:1"> | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_shadow_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Verify·User·Who·Owns·Backup·shadow·File</ocil:title> | 35 | ······<ocil:title>Verify·User·Who·Owns·Backup·shadow·File</ocil:title> |
| 24 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> | 37 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-no_forward_files_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 41 | ······<ocil:title>Verify·No·.forward·Files·Exist</ocil:title> |
| 30 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-no_forward_files_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-aide_build_database_ocil:questionnaire:1"> | ||
| 35 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_source_route_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv4·Interfaces·by·Default</ocil:title> | ||
| 36 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-service_nfs_disabled_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 53 | ······<ocil:title>Disable·Network·File·System·(nfs)</ocil:title> |
| 42 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-service_nfs_disabled_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_chmod_ocil:questionnaire:1"> | ||
| 47 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_home_directories_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>All·Interactive·User·Home·Directories·Must·Have·mode·0750·Or·Less·Permissive</ocil:title> | ||
| 48 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_home_directories_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_pub_key_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 65 | ······<ocil:title>Verify·Group·Ownership·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> |
| 54 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_sshd_pub_key_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_chcon_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 71 | ······<ocil:title>Record·Any·Attempts·to·Run·chcon</ocil:title> |
| 60 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_chcon_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_tmp_nosuid_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 77 | ······<ocil:title>Add·nosuid·Option·to·/var/tmp</ocil:title> |
| 66 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-mount_option_var_tmp_nosuid_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-package_rsyslog_installed_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure· | 83 | ······<ocil:title>Ensure·rsyslog·is·Installed</ocil:title> |
| 72 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-package_rsyslog_installed_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmodat_ocil:questionnaire:1"> | ||
| 77 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-accounts_user_dot_user_ownership_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>User·Initialization·Files·Must·Be·Owned·By·the·Primary·User</ocil:title> | ||
| 78 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-a | 91 | ········<ocil:test_action_ref>ocil:ssg-accounts_user_dot_user_ownership_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_group_ocil:questionnaire:1"> | ||
| 83 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-service_nftables_disabled_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Verify·nftables·Service·is·Disabled</ocil:title> | ||
| 84 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-service_nftables_disabled_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-no_shelllogin_for_systemaccounts_ocil:questionnaire:1"> | ||
| 89 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_redirects_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Disable·Accepting·ICMP·Redirects·for·All·IPv4·Interfaces</ocil:title> | ||
| 90 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_accept_redirects_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-package_telnet_removed_ocil:questionnaire:1"> | ||
| 95 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_source_route_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</ocil:title> | ||
| 96 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_log_audit_nodev_ocil:questionnaire:1"> | ||
| 101 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pam_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Enable·PAM</ocil:title> | ||
| 102 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pam_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-accounts_no_uid_except_zero_ocil:questionnaire:1"> | ||
| 107 | ····· | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_passwd_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Verify·Permissions·on·Backup·passwd·File</ocil:title> | ||
| 108 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 729613/741157 bytes (98.44%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of | 7 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 163 lines modified | Offset 72, 163 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="package_ | 79 | ····<cpe-lang:platform·id="package_bash"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 87 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 88 | ········</cpe-lang:logical-test> | ||
| 89 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 90 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 91 | ········</cpe-lang:logical-test> | ||
| 92 | ······</cpe-lang:logical-test> | ||
| 93 | ····</cpe-lang:platform> | ||
| 94 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="package_p | 84 | ····<cpe-lang:platform·id="package_pam"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_p | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="machine_and_mount_home"> | 89 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id="g | 95 | ····<cpe-lang:platform·id="package_dnf"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="machine"> | 105 | ····<cpe-lang:platform·id="machine_and_mount_var-tmp"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 123 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="package_sudo"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 130 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 131 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 132 | ····<cpe-lang:platform·id=" | 116 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_tmp:def:1"/> | ||
| 136 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 137 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 138 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> | 121 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> |
| 142 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 143 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 144 | ····<cpe-lang:platform·id="package_audit"> | 127 | ····<cpe-lang:platform·id="package_audit"> |
| 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 147 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 148 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 132 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 149 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 152 | ······</cpe-lang:logical-test> | ||
| 153 | ····</cpe-lang:platform> | ||
| 154 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 155 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-p | 135 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 136 | ········</cpe-lang:logical-test> | ||
| 137 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 139 | ········</cpe-lang:logical-test> | ||
| 157 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 158 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 159 | ····<cpe-lang:platform·id="machine_and_service_disabled_iptables_and_service_disabled_ufw"> | 142 | ····<cpe-lang:platform·id="machine_and_service_disabled_iptables_and_service_disabled_ufw"> |
| 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_iptables:def:1"/> | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_iptables:def:1"/> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 148 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id=" | 149 | ····<cpe-lang:platform·id="machine_and_mount_tmp"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_tmp:def:1"/> | ||
| 169 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| 171 | ····<cpe-lang:platform·id="package_s | 155 | ····<cpe-lang:platform·id="package_systemd"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_s | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 174 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 175 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 176 | ····<cpe-lang:platform·id="machine_and_mount_var- | 160 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 177 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 178 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var- | 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> |
| Max diff block lines reached; 818454/831366 bytes (98.45%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux2-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux2-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux2-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux2-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux2-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux2-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux2-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux2-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux2-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux2-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux2-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux2-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux2-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux2-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:alinux:alibaba_cloud_linux:2"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:alinux:alibaba_cloud_linux:2"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Alibaba·Cloud·Linux·2</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Alibaba·Cloud·Linux·2</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml">oval:ssg-installed_OS_is_alinux2:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml">oval:ssg-installed_OS_is_alinux2:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux2-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux2-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2024-11-0 | 36 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of | 40 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 119, 112 lines modified | Offset 119, 81 lines modified | ||
| 119 | ··········</cpe-lang:logical-test> | 119 | ··········</cpe-lang:logical-test> |
| 120 | ········</cpe-lang:platform> | 120 | ········</cpe-lang:platform> |
| 121 | ········<cpe-lang:platform·id="package_pam"> | 121 | ········<cpe-lang:platform·id="package_pam"> |
| 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 124 | ··········</cpe-lang:logical-test> | 124 | ··········</cpe-lang:logical-test> |
| 125 | ········</cpe-lang:platform> | 125 | ········</cpe-lang:platform> |
| 126 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | ||
| 126 | ········<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 127 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 128 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 129 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 130 | ············</cpe-lang:logical-test> | ||
| 131 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 132 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 133 | ············</cpe-lang:logical-test> | ||
| 134 | ··········</cpe-lang:logical-test> | ||
| 135 | ········</cpe-lang:platform> | ||
| 136 | ········<cpe-lang:platform·id="package_systemd"> | ||
| 137 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 139 | ··········</cpe-lang:logical-test> | ||
| 140 | ········</cpe-lang:platform> | ||
| 141 | ········<cpe-lang:platform·id="package_postfix"> | ||
| 142 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 144 | ··········</cpe-lang:logical-test> | ||
| 145 | ········</cpe-lang:platform> | ||
| 146 | ········<cpe-lang:platform·id="machine_and_package_autofs"> | ||
| 147 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 128 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 150 | ··········</cpe-lang:logical-test> | ||
| 151 | ········</cpe-lang:platform> | ||
| 152 | ········<cpe-lang:platform·id="package_ntp"> | ||
| 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 129 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 155 | ··········</cpe-lang:logical-test> | 131 | ··········</cpe-lang:logical-test> |
| 156 | ········</cpe-lang:platform> | 132 | ········</cpe-lang:platform> |
| 157 | ········<cpe-lang:platform·id=" | 133 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 158 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 160 | ··········</cpe-lang:logical-test> | 136 | ··········</cpe-lang:logical-test> |
| 161 | ········</cpe-lang:platform> | 137 | ········</cpe-lang:platform> |
| 162 | ········<cpe-lang:platform·id="package_ | 138 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 165 | ··········</cpe-lang:logical-test> | 141 | ··········</cpe-lang:logical-test> |
| 166 | ········</cpe-lang:platform> | 142 | ········</cpe-lang:platform> |
| 167 | ········<cpe-lang:platform·id=" | 143 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 168 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-sys | 145 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 170 | ··········</cpe-lang:logical-test> | 146 | ··········</cpe-lang:logical-test> |
| 171 | ········</cpe-lang:platform> | 147 | ········</cpe-lang:platform> |
| 172 | ········<cpe-lang:platform·id=" | 148 | ········<cpe-lang:platform·id="package_sudo"> |
| 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 150 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 175 | ··········</cpe-lang:logical-test> | 151 | ··········</cpe-lang:logical-test> |
| 176 | ········</cpe-lang:platform> | 152 | ········</cpe-lang:platform> |
| 177 | ········<cpe-lang:platform·id=" | 153 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 178 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 154 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 155 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 181 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 182 | ··········</cpe-lang:logical-test> | 156 | ··········</cpe-lang:logical-test> |
| 183 | ········</cpe-lang:platform> | 157 | ········</cpe-lang:platform> |
| 184 | ········<cpe-lang:platform·id="package_audit"> | 158 | ········<cpe-lang:platform·id="package_audit"> |
| 185 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 187 | ··········</cpe-lang:logical-test> | 161 | ··········</cpe-lang:logical-test> |
| 188 | ········</cpe-lang:platform> | 162 | ········</cpe-lang:platform> |
| 163 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 189 | ········<cpe-lang:platform·id="package_firewalld"> | ||
| 190 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 191 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 192 | ··········</cpe-lang:logical-test> | ||
| 193 | ········</cpe-lang:platform> | ||
| 194 | ········<cpe-lang:platform·id="machine_and_package_avahi"> | ||
| 195 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 196 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | ||
| 198 | ··········</cpe-lang:logical-test> | ||
| 199 | ········</cpe-lang:platform> | ||
| 200 | ········<cpe-lang:platform·id="package_chrony"> | ||
| 201 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 202 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 203 | ··········</cpe-lang:logical-test> | ||
| 204 | ········</cpe-lang:platform> | ||
| 205 | ········<cpe-lang:platform·id="package_yum"> | ||
| 206 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 166 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 167 | ············</cpe-lang:logical-test> | ||
| 168 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 207 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 169 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 170 | ············</cpe-lang:logical-test> | ||
| 208 | ··········</cpe-lang:logical-test> | 171 | ··········</cpe-lang:logical-test> |
| 209 | ········</cpe-lang:platform> | 172 | ········</cpe-lang:platform> |
| 210 | ········<cpe-lang:platform·id="machine_and_package_ufw"> | 173 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 211 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 1590410/1602245 bytes (99.26%) of diff not shown. | |||
| Offset 3, 7349 lines modified | Offset 3, 7061 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-no_shelllogin_for_systemaccounts_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure·that·System·Accounts·Do·Not·Run·a·Shell·Upon·Login</ocil:title> | ||
| 11 | ······<ocil:title>Verify·User·Who·Owns·/var/log/syslog·File</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_owner_var_log_syslog_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_allow_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Verify·Permissions·on·/etc/cron.allow·file</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-no_shelllogin_for_systemaccounts_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-audit | 16 | ····<ocil:questionnaire·id="ocil:ssg-auditd_write_logs_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Write·Audit·Logs·to·the·Disk</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-audit | 19 | ········<ocil:test_action_ref>ocil:ssg-auditd_write_logs_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-configure_crypto_policy_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 23 | ······<ocil:title>Configure·System·Cryptography·Policy</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-configure_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_grub2_cfg_ocil:questionnaire:1"> | ||
| 35 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-accounts_max_concurrent_login_sessions_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Limit·the·Number·of·Concurrent·Login·Sessions·Allowed·Per·User</ocil:title> | ||
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-accounts_max_concurrent_login_sessions_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-accounts_polyinstantiated_tmp_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 35 | ······<ocil:title>Configure·Polyinstantiation·of·/tmp·Directories</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-accounts_polyinstantiated_tmp_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_icmp_ignore_bogus_error_responses_ocil:questionnaire:1"> | ||
| 47 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_library_dirs_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Verify·that·Shared·Library·Files·Have·Root·Ownership</ocil:title> | ||
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_library_dirs_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_bug_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>En | 47 | ······<ocil:title>Enable·support·for·BUG()</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_bug_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-service_avahi-daemon_disabled_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Disable· | 53 | ······<ocil:title>Disable·Avahi·Server·Software</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-service_avahi-daemon_disabled_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_daily_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Verify·Permissions·on·cron.daily</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ | 61 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-ensure_logrotate_activated_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 65 | ······<ocil:title>Ensure·Logrotate·Runs·Periodically</ocil:title> |
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-ensure_logrotate_activated_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faillock_audit_ocil:questionnaire:1"> | ||
| 77 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_filter_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Enable·use·of·Berkeley·Packet·Filter·with·seccomp</ocil:title> | ||
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_seccomp_filter_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-accounts_maximum_age_login_defs_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Set·Password·Maximum·Age</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-accounts_maximum_age_login_defs_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_randomize_base_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 83 | ······<ocil:title>Randomize·the·address·of·the·kernel·image·(KASLR)</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_randomize_base_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_pubkey_auth_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>Disable·PubkeyAuthentication·Authentication</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_pubkey_auth_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_private_key_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 95 | ······<ocil:title>Verify·Permissions·on·SSH·Server·Private·*_key·Key·Files</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_allow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Verify·Group·Who·Owns·/etc/cron.allow·file</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_credentials_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 107 | ······<ocil:title>Enable·checks·on·credential·management</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_credentials_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-co | 112 | ····<ocil:questionnaire·id="ocil:ssg-account_use_centralized_automated_auth_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 113 | ······<ocil:title>Use·Centralized·and·Automated·Authentication</ocil:title> |
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-co | 115 | ········<ocil:test_action_ref>ocil:ssg-account_use_centralized_automated_auth_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-su | 118 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_dmesg_restrict_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 119 | ······<ocil:title>Restrict·unprivileged·access·to·the·kernel·syslog</ocil:title> |
| Max diff block lines reached; 873620/885970 bytes (98.61%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of | 7 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 86, 112 lines modified | Offset 86, 81 lines modified | ||
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_pam"> | 88 | ····<cpe-lang:platform·id="package_pam"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | ||
| 93 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 97 | ········</cpe-lang:logical-test> | ||
| 98 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 100 | ········</cpe-lang:logical-test> | ||
| 101 | ······</cpe-lang:logical-test> | ||
| 102 | ····</cpe-lang:platform> | ||
| 103 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | ||
| 107 | ····</cpe-lang:platform> | ||
| 108 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 111 | ······</cpe-lang:logical-test> | ||
| 112 | ····</cpe-lang:platform> | ||
| 113 | ····<cpe-lang:platform·id="machine_and_package_autofs"> | ||
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | ||
| 118 | ····</cpe-lang:platform> | ||
| 119 | ····<cpe-lang:platform·id="package_ntp"> | ||
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 122 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id="package_ | 105 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id=" | 110 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-sys | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id=" | 115 | ····<cpe-lang:platform·id="package_sudo"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 142 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 143 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 144 | ····<cpe-lang:platform·id=" | 120 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 145 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 149 | ······</cpe-lang:logical-test> | 123 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 124 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id="package_audit"> | 125 | ····<cpe-lang:platform·id="package_audit"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 156 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 159 | ······</cpe-lang:logical-test> | ||
| 160 | ····</cpe-lang:platform> | ||
| 161 | ····<cpe-lang:platform·id="machine_and_package_avahi"> | ||
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | ||
| 165 | ······</cpe-lang:logical-test> | ||
| 166 | ····</cpe-lang:platform> | ||
| 167 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 170 | ······</cpe-lang:logical-test> | ||
| 171 | ····</cpe-lang:platform> | ||
| 172 | ····<cpe-lang:platform·id="package_yum"> | ||
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 133 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 134 | ········</cpe-lang:logical-test> | ||
| 135 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 136 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 137 | ········</cpe-lang:logical-test> | ||
| 175 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id="machine_and_package_ufw"> | 140 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 181 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 182 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 183 | ····<cpe-lang:platform·id="package_ | 146 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 184 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 185 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 186 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 187 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 188 | ····<cpe-lang:platform·id="aarch64_arch"> | 152 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 189 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 190 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 155 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 156 | ········</cpe-lang:logical-test> | ||
| Max diff block lines reached; 649455/661562 bytes (98.17%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux3-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux3-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:alinux:alibaba_cloud_linux:3"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:alinux:alibaba_cloud_linux:3"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Alibaba·Cloud·Linux·3</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Alibaba·Cloud·Linux·3</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml">oval:ssg-installed_OS_is_alinux3:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml">oval:ssg-installed_OS_is_alinux3:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux3-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux3-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2024-11-0 | 36 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of | 40 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 109, 181 lines modified | Offset 109, 181 lines modified | ||
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 110 | ······<cpe-lang:platform-specification> | 110 | ······<cpe-lang:platform-specification> |
| 111 | ········<cpe-lang:platform·id="package_pam"> | 111 | ········<cpe-lang:platform·id="package_pam"> |
| 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 114 | ··········</cpe-lang:logical-test> | 114 | ··········</cpe-lang:logical-test> |
| 115 | ········</cpe-lang:platform> | 115 | ········</cpe-lang:platform> |
| 116 | ········<cpe-lang:platform·id="n | 116 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 118 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 119 | ············ | 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 120 | ············</cpe-lang:logical-test> | ||
| 121 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 122 | ············ | 119 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 123 | ············< | 120 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 124 | ··········</cpe-lang:logical-test> | 121 | ··········</cpe-lang:logical-test> |
| 125 | ········</cpe-lang:platform> | 122 | ········</cpe-lang:platform> |
| 126 | ········<cpe-lang:platform·id=" | 123 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 127 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 128 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 129 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 130 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 131 | ········<cpe-lang:platform·id="package_ | 128 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 132 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 134 | ··········</cpe-lang:logical-test> | 131 | ··········</cpe-lang:logical-test> |
| 135 | ········</cpe-lang:platform> | 132 | ········</cpe-lang:platform> |
| 136 | ········<cpe-lang:platform·id=" | 133 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 137 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 139 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 140 | ··········</cpe-lang:logical-test> | 136 | ··········</cpe-lang:logical-test> |
| 141 | ········</cpe-lang:platform> | 137 | ········</cpe-lang:platform> |
| 142 | ········<cpe-lang:platform·id="g | 138 | ········<cpe-lang:platform·id="package_sudo"> |
| 143 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 144 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 145 | ··········</cpe-lang:logical-test> | 141 | ··········</cpe-lang:logical-test> |
| 146 | ········</cpe-lang:platform> | 142 | ········</cpe-lang:platform> |
| 147 | ········<cpe-lang:platform·id=" | 143 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 148 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 144 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 145 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 150 | ··········</cpe-lang:logical-test> | 146 | ··········</cpe-lang:logical-test> |
| 151 | ········</cpe-lang:platform> | 147 | ········</cpe-lang:platform> |
| 152 | ········<cpe-lang:platform·id=" | 148 | ········<cpe-lang:platform·id="package_audit"> |
| 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 150 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 155 | ··········</cpe-lang:logical-test> | 151 | ··········</cpe-lang:logical-test> |
| 156 | ········</cpe-lang:platform> | 152 | ········</cpe-lang:platform> |
| 157 | ········<cpe-lang:platform·id=" | 153 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 158 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 156 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 157 | ············</cpe-lang:logical-test> | ||
| 158 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 159 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 160 | ············</cpe-lang:logical-test> | ||
| 160 | ··········</cpe-lang:logical-test> | 161 | ··········</cpe-lang:logical-test> |
| 161 | ········</cpe-lang:platform> | 162 | ········</cpe-lang:platform> |
| 162 | ········<cpe-lang:platform·id="machine_and_package_ | 163 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 166 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 166 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 167 | ··········</cpe-lang:logical-test> | 167 | ··········</cpe-lang:logical-test> |
| 168 | ········</cpe-lang:platform> | 168 | ········</cpe-lang:platform> |
| 169 | ········<cpe-lang:platform·id="machine_and_package_ | 169 | ········<cpe-lang:platform·id="machine_and_package_avahi"> |
| 170 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 170 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 171 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 172 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 173 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 172 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 174 | ··········</cpe-lang:logical-test> | 173 | ··········</cpe-lang:logical-test> |
| 175 | ········</cpe-lang:platform> | 174 | ········</cpe-lang:platform> |
| 176 | ········<cpe-lang:platform·id=" | 175 | ········<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 177 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 177 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 178 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 179 | ············</cpe-lang:logical-test> | ||
| 180 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 181 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 182 | ············</cpe-lang:logical-test> | ||
| 179 | ··········</cpe-lang:logical-test> | 183 | ··········</cpe-lang:logical-test> |
| 180 | ········</cpe-lang:platform> | 184 | ········</cpe-lang:platform> |
| 181 | ········<cpe-lang:platform·id="package_f | 185 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 182 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 186 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 187 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 188 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 189 | ············</cpe-lang:logical-test> | ||
| 190 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 191 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 192 | ············</cpe-lang:logical-test> | ||
| 193 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 184 | ··········</cpe-lang:logical-test> | 194 | ··········</cpe-lang:logical-test> |
| 185 | ········</cpe-lang:platform> | 195 | ········</cpe-lang:platform> |
| 186 | ········<cpe-lang:platform·id=" | 196 | ········<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 187 | ··········<cpe-lang:logical-test·operator=" | 197 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 188 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 189 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 199 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 190 | ··········</cpe-lang:logical-test> | 200 | ··········</cpe-lang:logical-test> |
| 191 | ········</cpe-lang:platform> | 201 | ········</cpe-lang:platform> |
| 192 | ········<cpe-lang:platform·id="package_ | 202 | ········<cpe-lang:platform·id="package_systemd"> |
| Max diff block lines reached; 1553354/1567704 bytes (99.08%) of diff not shown. | |||
| Offset 3, 2443 lines modified | Offset 3, 2443 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_crontab_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Verify·Permissions·on·crontab</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_crontab_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_login_events_faillock_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Record· | 17 | ······<ocil:title>Record·Attempts·to·Alter·Logon·and·Logout·Events·-·faillock</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_login_events_faillock_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_binfmt_misc_ocil:questionnaire:1"> | 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_binfmt_misc_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·kernel·support·for·MISC·binaries</ocil:title> | 23 | ······<ocil:title>Disable·kernel·support·for·MISC·binaries</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_binfmt_misc_action:testaction:1</ocil:test_action_ref> | 25 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_binfmt_misc_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_rhosts_rsa_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Disable·SSH·Support·for·Rhosts·RSA·Authentication</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_rhosts_rsa_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_disable_ipv6_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify·Group·Who·Owns·/var/log·Directory</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_var_log_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-pa | 40 | ····<ocil:questionnaire·id="ocil:ssg-package_libreswan_installed_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Install·libreswan·Package</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-pa | 43 | ········<ocil:test_action_ref>ocil:ssg-package_libreswan_installed_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_open_by_handle_at_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_last_change_is_in_past_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure·all·users·last·password·change·date·is·in·the·past</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-a | 49 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_last_change_is_in_past_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-package_ntp_installed_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Install·the·ntp·service</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-package_ntp_installed_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-display_login_attempts_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>En | 59 | ······<ocil:title>Ensure·PAM·Displays·Last·Logon/Access·Notification</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-display_login_attempts_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-s | 64 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_protected_hardlinks_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Enable·Kernel·Parameter·to·Enforce·DAC·on·Hardlinks</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-s | 67 | ········<ocil:test_action_ref>ocil:ssg-sysctl_fs_protected_hardlinks_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_group_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_key_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Specify·module·signing·key·to·use</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_key_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_reboot_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·reboot</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_reboot_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_fs_suid_dumpable_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchownat_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchownat</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchownat_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-selinux_policytype_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Configure·SELinux·Policy</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-selinux_policytype_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-grub2_slab_nomerge_argument_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Disable·merging·of·slabs·with·similar·size</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-grub2_slab_nomerge_argument_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-service_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-service_qpidd_disabled_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Disable·Apache·Qpid·(qpidd)</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-service_ | 103 | ········<ocil:test_action_ref>ocil:ssg-service_qpidd_disabled_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_allow_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_ftruncate_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·ftruncate</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_ftruncate_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_allow_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Verify·Permissions·on·/etc/cron.allow·file</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-grub2_slab_nomerge_argument_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_set_max_life_existing_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Set·Existing·Passwords·Maximum·Age</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_set_max_life_existing_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 866927/879352 bytes (98.59%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of | 7 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 76, 181 lines modified | Offset 76, 181 lines modified | ||
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_pam"> | 78 | ····<cpe-lang:platform·id="package_pam"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id="n | 83 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ········ | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 87 | ········</cpe-lang:logical-test> | ||
| 88 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 89 | ········ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 90 | ········< | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="package_ | 95 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="g | 105 | ····<cpe-lang:platform·id="package_sudo"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 110 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 115 | ····<cpe-lang:platform·id="package_audit"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 120 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 124 | ········</cpe-lang:logical-test> | ||
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 127 | ········</cpe-lang:logical-test> | ||
| 127 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id="machine_and_package_ | 130 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 134 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="machine_and_package_ | 136 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 141 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 143 | ····<cpe-lang:platform·id=" | 142 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 144 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 145 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 146 | ········</cpe-lang:logical-test> | ||
| 147 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 148 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 149 | ········</cpe-lang:logical-test> | ||
| 146 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id="package_f | 152 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 155 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 156 | ········</cpe-lang:logical-test> | ||
| 157 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 158 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 159 | ········</cpe-lang:logical-test> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 151 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id=" | 163 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 154 | ······<cpe-lang:logical-test·operator=" | 164 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 157 | ······</cpe-lang:logical-test> | 167 | ······</cpe-lang:logical-test> |
| 158 | ····</cpe-lang:platform> | 168 | ····</cpe-lang:platform> |
| 159 | ····<cpe-lang:platform·id="package_ | 169 | ····<cpe-lang:platform·id="package_systemd"> |
| 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 162 | ······</cpe-lang:logical-test> | 172 | ······</cpe-lang:logical-test> |
| 163 | ····</cpe-lang:platform> | 173 | ····</cpe-lang:platform> |
| 164 | ····<cpe-lang:platform·id="package_ | 174 | ····<cpe-lang:platform·id="machine_and_package_firewalld_and_package_nftables"> |
| 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 178 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 167 | ······</cpe-lang:logical-test> | 179 | ······</cpe-lang:logical-test> |
| 168 | ····</cpe-lang:platform> | 180 | ····</cpe-lang:platform> |
| 169 | ····<cpe-lang:platform·id=" | 181 | ····<cpe-lang:platform·id="machine"> |
| 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 182 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 183 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 172 | ······</cpe-lang:logical-test> | 184 | ······</cpe-lang:logical-test> |
| Max diff block lines reached; 620171/634681 bytes (97.71%) of diff not shown. | |||
| Offset 3, 6754 lines modified | Offset 3, 6940 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_bug_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Enable·support·for·BUG()</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_bug_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_rmdir_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·rmdir</ocil:title> | ||
| 17 | ······<ocil:title>Verify·User·Who·Owns·gshadow·File</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_gshadow_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-set_password_hashing_algorithm_systemauth_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Set·PAM''s·Password·Hashing·Algorithm</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-set_password_hashing_algorithm_systemauth_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-package_rsyslog_installed_ocil:questionnaire:1"> | ||
| 29 | ······<ocil:title>Ensure·rsyslog·is·Installed</ocil:title> | ||
| 30 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_rmdir_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-grub2_slab_nomerge_argument_ocil:questionnaire:1"> | ||
| 35 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-securetty_root_login_console_only_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Restrict·Virtual·Console·Root·Logins</ocil:title> | ||
| 36 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-securetty_root_login_console_only_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmodat_ocil:questionnaire:1"> | ||
| 41 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-sudo_remove_no_authenticate_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure·Users·Re-Authenticate·for·Privilege·Escalation·-·sudo·!authenticate</ocil:title> | ||
| 42 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sudo_remove_no_authenticate_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_pub_key_ocil:questionnaire:1"> | ||
| 47 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_secure_redirects_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Secure·ICMP·Redirects·on·all·IPv4·Interfaces</ocil:title> | ||
| 48 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_secure_redirects_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_removexattr_ocil:questionnaire:1"> | ||
| 53 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_keepalive_0_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Set·SSH·Client·Alive·Count·Max·to·zero</ocil:title> | ||
| 54 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_keepalive_0_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_passwd_ocil:questionnaire:1"> | ||
| 59 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_page_poisoning_zero_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Use·zero·for·poisoning·instead·of·debugging·value</ocil:title> | ||
| 60 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_page_poisoning_zero_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-configure_ssh_crypto_policy_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 47 | ······<ocil:title>Configure·SSH·to·use·System·Crypto·Policy</ocil:title> |
| 66 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-configure_ssh_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-sshd_print_last_log_ocil:questionnaire:1"> | ||
| 71 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Verify·Permissions·on·Backup·gshadow·File</ocil:title> | ||
| 72 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_rp_filter_ocil:questionnaire:1"> | ||
| 77 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_clock_settime_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Record·Attempts·to·Alter·Time·Through·clock_settime</ocil:title> | ||
| 78 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_clock_settime_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_dccp_disabled_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 65 | ······<ocil:title>Disable·DCCP·Support</ocil:title> |
| 84 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_dccp_disabled_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_srv_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 71 | ······<ocil:title>Ensure·/srv·Located·On·Separate·Partition</ocil:title> |
| 90 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-partition_for_srv_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_allow_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 77 | ······<ocil:title>Verify·Group·Who·Owns·/etc/cron.allow·file</ocil:title> |
| 96 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-configure_libreswan_crypto_policy_ocil:questionnaire:1"> | ||
| 101 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_num_logs_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Configure·auditd·Number·of·Logs·Retained</ocil:title> | ||
| 102 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_num_logs_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ipv6_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable·h | 89 | ······<ocil:title>Disable·the·IPv6·protocol</ocil:title> |
| 108 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 91 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ipv6_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_rename_ocil:questionnaire:1"> | ||
| 113 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_passwd_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Verify·User·Who·Owns·Backup·passwd·File</ocil:title> | ||
| 114 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_panic_on_oops_ocil:questionnaire:1"> | ||
| 119 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-ensure_logrotate_activated_ocil:questionnaire:1"> |
| Max diff block lines reached; 997052/1008266 bytes (98.89%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-23"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-23"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·23</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·23</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Anolis·OS·23.·It·is·a·rendering·of | 7 | configuration·settings·for·Anolis·OS·23.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 14 lines modified | Offset 71, 19 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_bash"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 78 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 83 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 82 | ········</cpe-lang:logical-test> | 87 | ········</cpe-lang:logical-test> |
| 83 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 84 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| Offset 86, 201 lines modified | Offset 91, 196 lines modified | ||
| 86 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_pam"> | 93 | ····<cpe-lang:platform·id="package_pam"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 97 | ········</cpe-lang:logical-test> | ||
| 98 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 100 | ········</cpe-lang:logical-test> | ||
| 101 | ······</cpe-lang:logical-test> | ||
| 102 | ····</cpe-lang:platform> | ||
| 103 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | ||
| 107 | ····</cpe-lang:platform> | ||
| 108 | ····<cpe-lang:platform·id=" | 98 | ····<cpe-lang:platform·id="uefi"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id="machine_and_package_a | 103 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 110 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id="package_ | 115 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 120 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-sys | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 123 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 124 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id=" | 125 | ····<cpe-lang:platform·id="package_sudo"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 144 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="package_audit"> | 135 | ····<cpe-lang:platform·id="package_audit"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id="package_f | 140 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 143 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 144 | ········</cpe-lang:logical-test> | ||
| 145 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 146 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 147 | ········</cpe-lang:logical-test> | ||
| 148 | ······</cpe-lang:logical-test> | ||
| 149 | ····</cpe-lang:platform> | ||
| 150 | ····<cpe-lang:platform·id="machine_and_package_ufw"> | ||
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="machine_and_package_avahi"> | 156 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 160 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 161 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 162 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 165 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 166 | ········</cpe-lang:logical-test> | ||
| 167 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 168 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 169 | ········</cpe-lang:logical-test> | ||
| Max diff block lines reached; 756330/768913 bytes (98.36%) of diff not shown. | |||
| Offset 3, 5173 lines modified | Offset 3, 5173 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmep_argument_absent_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Ensure·SMEP·is·not·disabled·during·boot</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-grub2_nosmep_argument_absent_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-service_cups_disabled_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Disable· | 17 | ······<ocil:title>Disable·the·CUPS·Service</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-service_cups_disabled_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_sshd_private_key_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-service_dhcpd_disabled_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·DHCP·Service</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-service_dhcpd_disabled_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-service_squid_disabled_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Disable·Squid</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-service_squid_disabled_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_var_log_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Verify·User·Who·Owns·/var/log·Directory</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_owner_var_log_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_finit_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Verify·Permissions·on·/var/log·Directory</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-coredump_disable_storage_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Disable·storing·core·dump</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-coredump_disable_storage_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-sshd_limit_user_access_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Limit·Users'·SSH·Access</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-sshd_limit_user_access_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-package_ntp_installed_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_syslog_plugin_activated_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Configure·auditd·to·use·audispd's·syslog·plugin</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-auditd_audispd_syslog_plugin_activated_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_unlinkat_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·unlinkat</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_unlinkat_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_default_mmap_min_addr_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_groupownership_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure·Log·Files·Are·Owned·By·Appropriate·Group</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_groupownership_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_dev_shm_nodev_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Add·nodev·Option·to·/dev/shm</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-mount_option_dev_shm_nodev_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_set_min_life_existing_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_open_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·open</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-a | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_open_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_rename_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_minclass_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Different·Categories</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-a | 91 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_minclass_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-service_firewalld_enabled_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-accounts_max_concurrent_login_sessions_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Limit·the·Number·of·Concurrent·Login·Sessions·Allowed·Per·User</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-s | 97 | ········<ocil:test_action_ref>ocil:ssg-accounts_max_concurrent_login_sessions_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_syn_cookies_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Enable·TCP/IP·syncookie·support</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_syn_cookies_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_list_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Enable·checks·on·linked·list·manipulation</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_list_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_hourly_ocil:questionnaire:1"> | 112 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_hourly_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Verify· | 113 | ······<ocil:title>Verify·Group·Who·Owns·cron.hourly</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_hourly_action:testaction:1</ocil:test_action_ref> | 115 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_hourly_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-configure_libreswan_crypto_policy_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-ensure_gpgcheck_globally_activated_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Ensure·gpgcheck·Enabled·In·Main·yum·Configuration</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-ensure_gpgcheck_globally_activated_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 1002448/1014678 bytes (98.79%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·8</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·8</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Anolis·OS·8.·It·is·a·rendering·of | 7 | configuration·settings·for·Anolis·OS·8.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 14 lines modified | Offset 71, 19 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_bash"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 78 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 83 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 82 | ········</cpe-lang:logical-test> | 87 | ········</cpe-lang:logical-test> |
| 83 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 84 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| Offset 86, 201 lines modified | Offset 91, 196 lines modified | ||
| 86 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_pam"> | 93 | ····<cpe-lang:platform·id="package_pam"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 97 | ········</cpe-lang:logical-test> | ||
| 98 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 100 | ········</cpe-lang:logical-test> | ||
| 101 | ······</cpe-lang:logical-test> | ||
| 102 | ····</cpe-lang:platform> | ||
| 103 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | ||
| 107 | ····</cpe-lang:platform> | ||
| 108 | ····<cpe-lang:platform·id=" | 98 | ····<cpe-lang:platform·id="uefi"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id="machine_and_package_a | 103 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 110 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id="package_ | 115 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 120 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-sys | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 123 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 124 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id=" | 125 | ····<cpe-lang:platform·id="package_sudo"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 144 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="package_audit"> | 135 | ····<cpe-lang:platform·id="package_audit"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id="package_f | 140 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 143 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 144 | ········</cpe-lang:logical-test> | ||
| 145 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 146 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 147 | ········</cpe-lang:logical-test> | ||
| 148 | ······</cpe-lang:logical-test> | ||
| 149 | ····</cpe-lang:platform> | ||
| 150 | ····<cpe-lang:platform·id="machine_and_package_ufw"> | ||
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="machine_and_package_avahi"> | 156 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 160 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 161 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 162 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 165 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 166 | ········</cpe-lang:logical-test> | ||
| 167 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 168 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 169 | ········</cpe-lang:logical-test> | ||
| Max diff block lines reached; 755818/768361 bytes (98.37%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2024-11-0 | 36 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of | 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation. | 42 | in·order·to·support·security·automation. |
| 43 | ········<html:br/> | 43 | ········<html:br/> |
| Offset 554, 15 lines modified | Offset 554, 15 lines modified | ||
| 554 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> | 554 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> |
| 555 | ············</xccdf-1.2:check> | 555 | ············</xccdf-1.2:check> |
| 556 | ··········</xccdf-1.2:Rule> | 556 | ··········</xccdf-1.2:Rule> |
| 557 | ········</xccdf-1.2:Group> | 557 | ········</xccdf-1.2:Group> |
| 558 | ······</xccdf-1.2:Group> | 558 | ······</xccdf-1.2:Group> |
| 559 | ····</xccdf-1.2:Benchmark> | 559 | ····</xccdf-1.2:Benchmark> |
| 560 | ··</ds:component> | 560 | ··</ds:component> |
| 561 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2024-11-0 | 561 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 562 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 562 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 563 | ······<oval-def:generator> | 563 | ······<oval-def:generator> |
| 564 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 564 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 565 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 565 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 566 | ········<oval:schema_version>5.11</oval:schema_version> | 566 | ········<oval:schema_version>5.11</oval:schema_version> |
| 567 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 567 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 568 | ······</oval-def:generator> | 568 | ······</oval-def:generator> |
| Offset 591, 15 lines modified | Offset 591, 15 lines modified | ||
| 591 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> | 591 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> |
| 592 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> | 592 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> |
| 593 | ··········<ind:instance·datatype="int">1</ind:instance> | 593 | ··········<ind:instance·datatype="int">1</ind:instance> |
| 594 | ········</ind:textfilecontent54_object> | 594 | ········</ind:textfilecontent54_object> |
| 595 | ······</oval-def:objects> | 595 | ······</oval-def:objects> |
| 596 | ····</oval-def:oval_definitions> | 596 | ····</oval-def:oval_definitions> |
| 597 | ··</ds:component> | 597 | ··</ds:component> |
| 598 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2024-11-0 | 598 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 599 | ····<ocil:ocil> | 599 | ····<ocil:ocil> |
| 600 | ······<ocil:generator> | 600 | ······<ocil:generator> |
| 601 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 601 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 602 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 602 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 603 | ········<ocil:schema_version>2.0</ocil:schema_version> | 603 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 604 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 604 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 605 | ······</ocil:generator> | 605 | ······</ocil:generator> |
| Offset 650, 15 lines modified | Offset 650, 15 lines modified | ||
| 650 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | 650 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control |
| 651 | The·output·should·contain·ahlt | 651 | The·output·should·contain·ahlt |
| 652 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | 652 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> |
| 653 | ········</ocil:boolean_question> | 653 | ········</ocil:boolean_question> |
| 654 | ······</ocil:questions> | 654 | ······</ocil:questions> |
| 655 | ····</ocil:ocil> | 655 | ····</ocil:ocil> |
| 656 | ··</ds:component> | 656 | ··</ds:component> |
| 657 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2024-11-0 | 657 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 658 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 658 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 659 | ······<oval-def:generator> | 659 | ······<oval-def:generator> |
| 660 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> | 660 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> |
| 661 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> | 661 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.7+</oval:product_version> |
| 662 | ········<oval:schema_version>5.11</oval:schema_version> | 662 | ········<oval:schema_version>5.11</oval:schema_version> |
| 663 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 663 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 664 | ······</oval-def:generator> | 664 | ······</oval-def:generator> |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of | 7 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation. | 9 | in·order·to·support·security·automation. |
| 10 | ····<html:br/> | 10 | ····<html:br/> |
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.1"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.1"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.10"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.10"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4.10</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4.10</cpe-dict:title> |
| Offset 111, 17 lines modified | Offset 111, 17 lines modified | ||
| 111 | ······</cpe-dict:cpe-item> | 111 | ······</cpe-dict:cpe-item> |
| 112 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:openshift_container_platform_node:4"> | 112 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:openshift_container_platform_node:4"> |
| 113 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4·Node</cpe-dict:title> | 113 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4·Node</cpe-dict:title> |
| 114 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4_node:def:1</cpe-dict:check> | 114 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4_node:def:1</cpe-dict:check> |
| 115 | ······</cpe-dict:cpe-item> | 115 | ······</cpe-dict:cpe-item> |
| 116 | ····</cpe-dict:cpe-list> | 116 | ····</cpe-dict:cpe-list> |
| 117 | ··</ds:component> | 117 | ··</ds:component> |
| 118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-xccdf.xml"·timestamp="2024-11-0 | 118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 119 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 119 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 120 | ······<xccdf-1.2:status·date="2024-11-0 | 120 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 121 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> | 121 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> |
| 122 | ······<xccdf-1.2:description> | 122 | ······<xccdf-1.2:description> |
| 123 | ········This·guide·presents·a·catalog·of·security-relevant | 123 | ········This·guide·presents·a·catalog·of·security-relevant |
| 124 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of | 124 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of |
| 125 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 125 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 126 | in·order·to·support·security·automation.··The·SCAP·content·is | 126 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 127 | is·available·in·the | 127 | is·available·in·the |
| Offset 189, 105 lines modified | Offset 189, 79 lines modified | ||
| 189 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 189 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 190 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 190 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 191 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 191 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 192 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 192 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 193 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 193 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 194 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 194 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 195 | ······<cpe-lang:platform-specification> | 195 | ······<cpe-lang:platform-specification> |
| 196 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> | ||
| 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 199 | ··········</cpe-lang:logical-test> | ||
| 200 | ········</cpe-lang:platform> | ||
| 196 | ········<cpe-lang:platform·id=" | 201 | ········<cpe-lang:platform·id="ocp4-on-sdn"> |
| 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 202 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 199 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_nod | 203 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_openshiftsdn:def:1"/> |
| 200 | ··········</cpe-lang:logical-test> | 204 | ··········</cpe-lang:logical-test> |
| 201 | ········</cpe-lang:platform> | 205 | ········</cpe-lang:platform> |
| 202 | ········<cpe-lang:platform·id="ocp4-n | 206 | ········<cpe-lang:platform·id="ocp4-on-azure"> |
| 203 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 207 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 204 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_n | 208 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_azure:def:1"/> |
| 205 | ··········</cpe-lang:logical-test> | 209 | ··········</cpe-lang:logical-test> |
| 206 | ········</cpe-lang:platform> | 210 | ········</cpe-lang:platform> |
| 207 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6_or_ocp4.7_or_ocp4.8"> | 211 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.6_or_ocp4.7_or_ocp4.8_or_ocp4.9"> |
| 208 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 212 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 209 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 213 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 210 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 214 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 211 | ············</cpe-lang:logical-test> | 215 | ············</cpe-lang:logical-test> |
| 212 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> | 216 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 217 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 213 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 218 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 214 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | 219 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> |
| 215 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | 220 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 221 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 216 | ············</cpe-lang:logical-test> | 222 | ············</cpe-lang:logical-test> |
| 217 | ··········</cpe-lang:logical-test> | 223 | ··········</cpe-lang:logical-test> |
| 218 | ········</cpe-lang:platform> | 224 | ········</cpe-lang:platform> |
| 219 | ········<cpe-lang:platform·id="ocp4-on-hypershift"> | ||
| 220 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 221 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 222 | ··········</cpe-lang:logical-test> | ||
| 223 | ········</cpe-lang:platform> | ||
| 224 | ········<cpe-lang:platform·id="ocp4 | 225 | ········<cpe-lang:platform·id="ocp4.16"> |
| 225 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 226 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 226 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_aws:def:1"/> | ||
| 227 | ··········</cpe-lang:logical-test> | ||
| 228 | ········</cpe-lang:platform> | ||
| 229 | ········<cpe-lang:platform·id="ocp4.6_or_ocp4.7"> | ||
| 230 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 231 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 227 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> |
| 232 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 233 | ··········</cpe-lang:logical-test> | ||
| 234 | ········</cpe-lang:platform> | ||
| 235 | ········<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> | ||
| 236 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 237 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 238 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 239 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 240 | ··········</cpe-lang:logical-test> | 228 | ··········</cpe-lang:logical-test> |
| 241 | ········</cpe-lang:platform> | 229 | ········</cpe-lang:platform> |
| 242 | ········<cpe-lang:platform·id=" | 230 | ········<cpe-lang:platform·id="ocp4-on-hypershift"> |
| 243 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 231 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 244 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 245 | ············ | 232 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 246 | ············</cpe-lang:logical-test> | ||
| 247 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 248 | ··········</cpe-lang:logical-test> | 233 | ··········</cpe-lang:logical-test> |
| 249 | ········</cpe-lang:platform> | 234 | ········</cpe-lang:platform> |
| 250 | ········<cpe-lang:platform·id="ocp4-master-node"> | 235 | ········<cpe-lang:platform·id="ocp4-master-node"> |
| 251 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 236 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 252 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-node_is_ocp4_master_node:def:1"/> | 237 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-node_is_ocp4_master_node:def:1"/> |
| 253 | ··········</cpe-lang:logical-test> | 238 | ··········</cpe-lang:logical-test> |
| 254 | ········</cpe-lang:platform> | 239 | ········</cpe-lang:platform> |
| 255 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> | ||
| 256 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 257 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 258 | ··········</cpe-lang:logical-test> | ||
| 259 | ········</cpe-lang:platform> | ||
| 260 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4. | 240 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6_or_ocp4.7_or_ocp4.8"> |
| 261 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 241 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 262 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 242 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 263 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 243 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 264 | ············</cpe-lang:logical-test> | 244 | ············</cpe-lang:logical-test> |
| 265 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> | 245 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 266 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 267 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 246 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 268 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | 247 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> |
| 269 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | 248 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 270 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 271 | ············</cpe-lang:logical-test> | 249 | ············</cpe-lang:logical-test> |
| 272 | ··········</cpe-lang:logical-test> | 250 | ··········</cpe-lang:logical-test> |
| 273 | ········</cpe-lang:platform> | 251 | ········</cpe-lang:platform> |
| 274 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift | 252 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.12_or_ocp4.13"> |
| Max diff block lines reached; 891327/904266 bytes (98.57%) of diff not shown. | |||
| Offset 3, 5399 lines modified | Offset 3, 5355 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-container_security_operator_exists_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Make·sure·the·Container·Security·Operator·is·installed</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-container_security_operator_exists_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-c | 10 | ····<ocil:questionnaire·id="ocil:ssg-compliance_notification_enabled_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure·the·notification·is·enabled·for·Compliance·Operator</ocil:title> | ||
| 17 | ······<ocil:title>Ensure·that·Cluster·Version·Operator·is·deployed</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-cluster_version_operator_exists_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_kubelet_conf_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Verify·Group·Who·Owns·The·Kubelet·Configuration·File</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_kubelet_conf_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-scheduler_port_is_zero_ocil:questionnaire:1"> | ||
| 29 | ······<ocil:title>Ensure·that·the·port·parameter·is·zero</ocil:title> | ||
| 30 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-compliance_notification_enabled_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-api_server_kubelet_client_cert_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 17 | ······<ocil:title>Configure·the·kubelet·Certificate·File·for·the·API·Server</ocil:title> |
| 36 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-api_server_kubelet_client_cert_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-oauth_or_oauthclient_token_maxage_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 23 | ······<ocil:title>Configure·OAuth·tokens·to·expire·after·a·set·period·of·inactivity</ocil:title> |
| 42 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-oauth_or_oauthclient_token_maxage_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_configure_tls_cert_pre_4_9_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 29 | ······<ocil:title>Ensure·That·The·kubelet·Client·Certificate·Is·Correctly·Set</ocil:title> |
| 48 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-kubelet_configure_tls_cert_pre_4_9_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_multus_conf_ocil:questionnaire:1"> | ||
| 53 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-api_server_tls_security_profile_custom_min_tls_version_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Ensure·custom·tlsSecurityProfile·configured·for·APIServer·uses·secure·TLS·version</ocil:title> | ||
| 54 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-api_server_tls_security_profile_custom_min_tls_version_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-fips_mode_enabled_on_all_nodes_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 41 | ······<ocil:title>Ensure·that·FIPS·mode·is·enabled·on·all·cluster·nodes</ocil:title> |
| 60 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-fips_mode_enabled_on_all_nodes_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-security_profiles_operator_exists_ocil:questionnaire:1"> | ||
| 65 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-directory_access_var_log_ocp_audit_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Record·Access·Events·to·OpenShift·Audit·Log·Directory</ocil:title> | ||
| 66 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-directory_access_var_log_ocp_audit_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_configure_tls_key_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 53 | ······<ocil:title>Ensure·That·The·kubelet·Server·Key·Is·Correctly·Set</ocil:title> |
| 72 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-kubelet_configure_tls_key_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-resource_requests_quota_per_project_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·workloads·use·resource·requests·and·limits·per·namespace</ocil:title> |
| 78 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-resource_requests_quota_per_project_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-accounts_restrict_service_account_tokens_ocil:questionnaire:1"> | ||
| 83 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_kubeconfig_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify·User·Who·Owns·The·OpenShift·Admin·Kubeconfig·File</ocil:title> | ||
| 84 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_owner_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_ip_allocations_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 71 | ······<ocil:title>Verify·Group·Who·Owns·The·OpenShift·SDN·Container·Network·Interface·Plugin·IP·Address·Allocations</ocil:title> |
| 90 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_ip_allocations_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-i | 76 | ····<ocil:questionnaire·id="ocil:ssg-directory_access_var_log_oauth_audit_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 77 | ······<ocil:title>Record·Access·Events·to·OAuth·Audit·Log·Directory</ocil:title> |
| 96 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-i | 79 | ········<ocil:test_action_ref>ocil:ssg-directory_access_var_log_oauth_audit_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-openshift_motd_exists_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·that·the·OpenShift·MOTD·is·set</ocil:title> |
| 102 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-openshift_motd_exists_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-api_server_api_priority_v1alpha1_flowschema_catch_all_ocil:questionnaire:1"> | ||
| 107 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_kube_audit_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>The·Kubernetes·Audit·Logs·Directory·Must·Have·Mode·0700</ocil:title> | ||
| 108 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-directory_permissions_var_log_kube_audit_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-api_server_oauth_https_serving_cert_ocil:questionnaire:1"> | 94 | ····<ocil:questionnaire·id="ocil:ssg-api_server_oauth_https_serving_cert_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Ensure·the·openshift-oauth-apiserver·service·uses·TLS</ocil:title> | 95 | ······<ocil:title>Ensure·the·openshift-oauth-apiserver·service·uses·TLS</ocil:title> |
| 114 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-api_server_oauth_https_serving_cert_action:testaction:1</ocil:test_action_ref> | 97 | ········<ocil:test_action_ref>ocil:ssg-api_server_oauth_https_serving_cert_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_kube_scheduler_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Verify·Permissions·on·the·Kube·Scheduler·Pod·Specification·File</ocil:title> | ||
| 119 | ······<ocil:title>Verify·User·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> | ||
| 120 | ······<ocil:actions> | ||
| 121 | ········<ocil:test_action_ref>ocil:ssg-file_owner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> | ||
| 122 | ······</ocil:actions> | ||
| 123 | ····</ocil:questionnaire> | ||
| Max diff block lines reached; 828860/840776 bytes (98.58%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of | 7 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 105 lines modified | Offset 72, 79 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="not_ | 79 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="ocp4-on-sdn"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_nod | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_openshiftsdn:def:1"/> |
| 83 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 84 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 85 | ····<cpe-lang:platform·id="ocp4-n | 89 | ····<cpe-lang:platform·id="ocp4-on-azure"> |
| 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_n | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_azure:def:1"/> |
| 88 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 89 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 90 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6_or_ocp4.7_or_ocp4.8"> | 94 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.6_or_ocp4.7_or_ocp4.8_or_ocp4.9"> |
| 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 92 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 93 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 94 | ········</cpe-lang:logical-test> | 98 | ········</cpe-lang:logical-test> |
| 95 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | 99 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 100 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 101 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | 102 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> |
| 98 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | 103 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 104 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 99 | ········</cpe-lang:logical-test> | 105 | ········</cpe-lang:logical-test> |
| 100 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 101 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 102 | ····<cpe-lang:platform·id="ocp4-on-hypershift"> | ||
| 103 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 105 | ······</cpe-lang:logical-test> | ||
| 106 | ····</cpe-lang:platform> | ||
| 107 | ····<cpe-lang:platform·id="ocp4 | 108 | ····<cpe-lang:platform·id="ocp4.16"> |
| 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_aws:def:1"/> | ||
| 110 | ······</cpe-lang:logical-test> | ||
| 111 | ····</cpe-lang:platform> | ||
| 112 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7"> | ||
| 113 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 116 | ······</cpe-lang:logical-test> | ||
| 117 | ····</cpe-lang:platform> | ||
| 118 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> | ||
| 119 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 123 | ······</cpe-lang:logical-test> | 111 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 112 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id=" | 113 | ····<cpe-lang:platform·id="ocp4-on-hypershift"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 128 | ········ | 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 129 | ········</cpe-lang:logical-test> | ||
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 131 | ······</cpe-lang:logical-test> | 116 | ······</cpe-lang:logical-test> |
| 132 | ····</cpe-lang:platform> | 117 | ····</cpe-lang:platform> |
| 133 | ····<cpe-lang:platform·id="ocp4-master-node"> | 118 | ····<cpe-lang:platform·id="ocp4-master-node"> |
| 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-node_is_ocp4_master_node:def:1"/> | 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-node_is_ocp4_master_node:def:1"/> |
| 136 | ······</cpe-lang:logical-test> | 121 | ······</cpe-lang:logical-test> |
| 137 | ····</cpe-lang:platform> | 122 | ····</cpe-lang:platform> |
| 138 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> | ||
| 139 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 141 | ······</cpe-lang:logical-test> | ||
| 142 | ····</cpe-lang:platform> | ||
| 143 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4. | 123 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6_or_ocp4.7_or_ocp4.8"> |
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 146 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 147 | ········</cpe-lang:logical-test> | 127 | ········</cpe-lang:logical-test> |
| 148 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | 128 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 150 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 129 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 151 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | 130 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> |
| 152 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | 131 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 153 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 154 | ········</cpe-lang:logical-test> | 132 | ········</cpe-lang:logical-test> |
| 155 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift | 135 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.12_or_ocp4.13"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 137 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 160 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 161 | ········</cpe-lang:logical-test> | ||
| 162 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 163 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 164 | ········</cpe-lang:logical-test> | 139 | ········</cpe-lang:logical-test> |
| 140 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 141 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_12:def:1"/> | ||
| 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_13:def:1"/> | ||
| 165 | ······</cpe-lang:logical-test> | 143 | ········</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | ||
| 167 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> | ||
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 170 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15_or_ocp4.16_or_ocp4.9"> | 146 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15_or_ocp4.16_or_ocp4.9"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 175 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 176 | ········</cpe-lang:logical-test> | 150 | ········</cpe-lang:logical-test> |
| Offset 182, 86 lines modified | Offset 156, 112 lines modified | ||
| Max diff block lines reached; 13400/26075 bytes (51.39%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openembedded-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openembedded-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openembedded-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openembedded-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openembedded-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openembedded-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openembedded-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openembedded-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openembedded-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openembedded-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openembedded-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openembedded-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openembedded-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openembedded-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openembedded:harden:"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openembedded:harden:"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">OpenEmbedded·Harden·distribution</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">OpenEmbedded·Harden·distribution</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml">oval:ssg-installed_OS_is_oeharden:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml">oval:ssg-installed_OS_is_oeharden:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openembedded:nodistro:"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openembedded:nodistro:"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">OpenEmbedded·nodistro</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">OpenEmbedded·nodistro</cpe-dict:title> |
| Offset 39, 17 lines modified | Offset 39, 17 lines modified | ||
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ······<cpe-dict:cpe-item·name="cpe:/o:openembedded:poky:"> | 40 | ······<cpe-dict:cpe-item·name="cpe:/o:openembedded:poky:"> |
| 41 | ········<cpe-dict:title·xml:lang="en-us">OpenEmbedded·Poky·reference·distribution</cpe-dict:title> | 41 | ········<cpe-dict:title·xml:lang="en-us">OpenEmbedded·Poky·reference·distribution</cpe-dict:title> |
| 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml">oval:ssg-installed_OS_is_poky:def:1</cpe-dict:check> | 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml">oval:ssg-installed_OS_is_poky:def:1</cpe-dict:check> |
| 43 | ······</cpe-dict:cpe-item> | 43 | ······</cpe-dict:cpe-item> |
| 44 | ····</cpe-dict:cpe-list> | 44 | ····</cpe-dict:cpe-list> |
| 45 | ··</ds:component> | 45 | ··</ds:component> |
| 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openembedded-xccdf.xml"·timestamp="2024-11-0 | 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openembedded-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 48 | ······<xccdf-1.2:status·date="2024-11-0 | 48 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> | 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> |
| 50 | ······<xccdf-1.2:description> | 50 | ······<xccdf-1.2:description> |
| 51 | ········This·guide·presents·a·catalog·of·security-relevant | 51 | ········This·guide·presents·a·catalog·of·security-relevant |
| 52 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of | 52 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of |
| 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 54 | in·order·to·support·security·automation.··The·SCAP·content·is | 54 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 55 | is·available·in·the | 55 | is·available·in·the |
| Offset 116, 14 lines modified | Offset 116, 19 lines modified | ||
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 122 | ······<cpe-lang:platform-specification> | 122 | ······<cpe-lang:platform-specification> |
| 123 | ········<cpe-lang:platform·id="package_bash"> | ||
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | ||
| 126 | ··········</cpe-lang:logical-test> | ||
| 127 | ········</cpe-lang:platform> | ||
| 123 | ········<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 128 | ········<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 130 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 126 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 131 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 127 | ············</cpe-lang:logical-test> | 132 | ············</cpe-lang:logical-test> |
| 128 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 129 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 134 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| Offset 131, 185 lines modified | Offset 136, 180 lines modified | ||
| 131 | ··········</cpe-lang:logical-test> | 136 | ··········</cpe-lang:logical-test> |
| 132 | ········</cpe-lang:platform> | 137 | ········</cpe-lang:platform> |
| 133 | ········<cpe-lang:platform·id="package_pam"> | 138 | ········<cpe-lang:platform·id="package_pam"> |
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 136 | ··········</cpe-lang:logical-test> | 141 | ··········</cpe-lang:logical-test> |
| 137 | ········</cpe-lang:platform> | 142 | ········</cpe-lang:platform> |
| 138 | ········<cpe-lang:platform·id="n | 143 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 140 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 141 | ············ | 145 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 142 | ············</cpe-lang:logical-test> | ||
| 143 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 144 | ············ | 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 145 | ············< | 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 146 | ··········</cpe-lang:logical-test> | 148 | ··········</cpe-lang:logical-test> |
| 147 | ········</cpe-lang:platform> | 149 | ········</cpe-lang:platform> |
| 148 | ········<cpe-lang:platform·id=" | 150 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 149 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 151 | ··········</cpe-lang:logical-test> | 153 | ··········</cpe-lang:logical-test> |
| 152 | ········</cpe-lang:platform> | 154 | ········</cpe-lang:platform> |
| 153 | ········<cpe-lang:platform·id="package_ | 155 | ········<cpe-lang:platform·id="package_dnf"> |
| 154 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 156 | ··········</cpe-lang:logical-test> | 158 | ··········</cpe-lang:logical-test> |
| 157 | ········</cpe-lang:platform> | 159 | ········</cpe-lang:platform> |
| 158 | ········<cpe-lang:platform·id="g | 160 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 159 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 161 | ··········</cpe-lang:logical-test> | 163 | ··········</cpe-lang:logical-test> |
| 162 | ········</cpe-lang:platform> | 164 | ········</cpe-lang:platform> |
| 163 | ········<cpe-lang:platform·id=" | 165 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 166 | ··········</cpe-lang:logical-test> | 168 | ··········</cpe-lang:logical-test> |
| 167 | ········</cpe-lang:platform> | 169 | ········</cpe-lang:platform> |
| 168 | ········<cpe-lang:platform·id=" | 170 | ········<cpe-lang:platform·id="package_sudo"> |
| 169 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 172 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 171 | ··········</cpe-lang:logical-test> | 173 | ··········</cpe-lang:logical-test> |
| 172 | ········</cpe-lang:platform> | 174 | ········</cpe-lang:platform> |
| 173 | ········<cpe-lang:platform·id=" | 175 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 174 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 176 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 175 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 176 | ··········</cpe-lang:logical-test> | 178 | ··········</cpe-lang:logical-test> |
| 177 | ········</cpe-lang:platform> | 179 | ········</cpe-lang:platform> |
| 178 | ········<cpe-lang:platform·id=" | 180 | ········<cpe-lang:platform·id="package_audit"> |
| 179 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 181 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 181 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 182 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 182 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 183 | ··········</cpe-lang:logical-test> | 183 | ··········</cpe-lang:logical-test> |
| 184 | ········</cpe-lang:platform> | 184 | ········</cpe-lang:platform> |
| 185 | ········<cpe-lang:platform·id="package_a | 185 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 186 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 186 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 187 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 188 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 189 | ············</cpe-lang:logical-test> | ||
| 190 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 187 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 191 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 192 | ············</cpe-lang:logical-test> | ||
| 188 | ··········</cpe-lang:logical-test> | 193 | ··········</cpe-lang:logical-test> |
| 189 | ········</cpe-lang:platform> | 194 | ········</cpe-lang:platform> |
| 190 | ········<cpe-lang:platform·id=" | 195 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 191 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 196 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 192 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 193 | ··········</cpe-lang:logical-test> | 199 | ··········</cpe-lang:logical-test> |
| 194 | ········</cpe-lang:platform> | 200 | ········</cpe-lang:platform> |
| 195 | ········<cpe-lang:platform·id="machine_and_package_avahi"> | 201 | ········<cpe-lang:platform·id="machine_and_package_avahi"> |
| 196 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 202 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 203 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| Max diff block lines reached; 1684893/1698617 bytes (99.19%) of diff not shown. | |||
| Offset 3, 5025 lines modified | Offset 3, 5025 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-grub2_mce_argument_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Force·kernel·panic·on·uncorrected·MCEs</ocil:title> | ||
| 11 | ······<ocil:title>Record·Events·that·Modify·the·System's·Mandatory·Access·Controls·in·usr/share</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_mac_modification_usr_share_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-ensure_gpgcheck_globally_activated_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Ensure·gpgcheck·Enabled·In·Main·dnf·Configuration</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-ensure_gpgcheck_globally_activated_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_monthly_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Verify·Permissions·on·cron.monthly</ocil:title> | ||
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-grub2_mce_argument_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_uvcvideo_disabled_ocil:questionnaire:1"> | ||
| 29 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_forwarding_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Disable·Kernel·Parameter·for·IPv6·Forwarding</ocil:title> | ||
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_forwarding_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-securetty_root_login_console_only_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 23 | ······<ocil:title>Restrict·Virtual·Console·Root·Logins</ocil:title> |
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-securetty_root_login_console_only_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_proc_kcore_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 29 | ······<ocil:title>Disable·support·for·/proc/kkcore</ocil:title> |
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_proc_kcore_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_library_dirs_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 35 | ······<ocil:title>Verify·that·Shared·Library·Files·Have·Root·Ownership</ocil:title> |
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_library_dirs_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 40 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_binfmt_misc_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 41 | ······<ocil:title>Disable·kernel·support·for·MISC·binaries</ocil:title> |
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 43 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_binfmt_misc_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fremovexattr_ocil:questionnaire:1"> | ||
| 59 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_all_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Enable·automatic·signing·of·all·modules</ocil:title> | ||
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_all_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_ocil:questionnaire:1"> | ||
| 65 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_home_directories_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>All·Interactive·User·Home·Directories·Must·Be·Owned·By·The·Primary·User</ocil:title> | ||
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_home_directories_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_unmap_kernel_at_el0_ocil:questionnaire:1"> | ||
| 71 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lsetxattr_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·lsetxattr</ocil:title> | ||
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_lsetxattr_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_error_action_stig_ocil:questionnaire:1"> | ||
| 77 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_passwd_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify·Permissions·on·Backup·passwd·File</ocil:title> | ||
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-journald_forward_to_syslog_ocil:questionnaire:1"> | ||
| 83 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount2</ocil:title> | ||
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount2_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-service_rsyslog_enabled_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Enable· | 77 | ······<ocil:title>Enable·rsyslog·Service</ocil:title> |
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-service_rsyslog_enabled_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_default_mmap_min_addr_ocil:questionnaire:1"> | ||
| 95 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-sudo_remove_nopasswd_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Ensure·Users·Re-Authenticate·for·Privilege·Escalation·-·sudo·NOPASSWD</ocil:title> | ||
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sudo_remove_nopasswd_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 89 | ······<ocil:title>Verify·Permissions·on·Backup·gshadow·File</ocil:title> |
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_shadow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 95 | ······<ocil:title>Verify·User·Who·Owns·shadow·File</ocil:title> |
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_password_login_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Disable· | 101 | ······<ocil:title>Disable·SSH·root·Login·with·a·Password·(Insecure)</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_password_login_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_private_key_ocil:questionnaire:1"> | ||
| 119 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-grub2_slab_nomerge_argument_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable·merging·of·slabs·with·similar·size</ocil:title> | ||
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| Max diff block lines reached; 905658/917626 bytes (98.70%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of | 7 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 14 lines modified | Offset 71, 19 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_bash"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 78 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 83 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 82 | ········</cpe-lang:logical-test> | 87 | ········</cpe-lang:logical-test> |
| 83 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 84 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| Offset 86, 185 lines modified | Offset 91, 180 lines modified | ||
| 86 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_pam"> | 93 | ····<cpe-lang:platform·id="package_pam"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="n | 98 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 96 | ········ | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 97 | ········</cpe-lang:logical-test> | ||
| 98 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 99 | ········ | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 100 | ········< | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="package_ | 110 | ····<cpe-lang:platform·id="package_dnf"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id="g | 115 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 116 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 117 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 118 | ····<cpe-lang:platform·id=" | 120 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 121 | ······</cpe-lang:logical-test> | 123 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 124 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id=" | 125 | ····<cpe-lang:platform·id="package_sudo"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 126 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 127 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 128 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 129 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 131 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 132 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 133 | ····<cpe-lang:platform·id=" | 135 | ····<cpe-lang:platform·id="package_audit"> |
| 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 138 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="package_a | 140 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 143 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 144 | ········</cpe-lang:logical-test> | ||
| 145 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 146 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 147 | ········</cpe-lang:logical-test> | ||
| 143 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id=" | 150 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id="machine_and_package_avahi"> | 156 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 160 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 161 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id=" | 162 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 165 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 166 | ········</cpe-lang:logical-test> | ||
| 167 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 168 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 169 | ········</cpe-lang:logical-test> | ||
| 159 | ······</cpe-lang:logical-test> | 170 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 171 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id=" | 172 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 175 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 176 | ········</cpe-lang:logical-test> | ||
| 177 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 178 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 179 | ········</cpe-lang:logical-test> | ||
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 181 | ······</cpe-lang:logical-test> |
| Max diff block lines reached; 707717/721374 bytes (98.11%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> |
| Offset 35, 17 lines modified | Offset 35, 17 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2024-11-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="2024-11-0 | 44 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of | 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 50 | in·order·to·support·security·automation.··The·SCAP·content·is | 50 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 51 | is·available·in·the | 51 | is·available·in·the |
| Offset 112, 144 lines modified | Offset 112, 144 lines modified | ||
| 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 118 | ······<cpe-lang:platform-specification> | 118 | ······<cpe-lang:platform-specification> |
| 119 | ········<cpe-lang:platform·id="package_ | 119 | ········<cpe-lang:platform·id="package_bash"> |
| 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 122 | ··········</cpe-lang:logical-test> | 122 | ··········</cpe-lang:logical-test> |
| 123 | ········</cpe-lang:platform> | 123 | ········</cpe-lang:platform> |
| 124 | ········<cpe-lang:platform·id="package_ | 124 | ········<cpe-lang:platform·id="package_pam"> |
| 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 127 | ··········</cpe-lang:logical-test> | 127 | ··········</cpe-lang:logical-test> |
| 128 | ········</cpe-lang:platform> | 128 | ········</cpe-lang:platform> |
| 129 | ········<cpe-lang:platform·id=" | 129 | ········<cpe-lang:platform·id="uefi"> |
| 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 132 | ··········</cpe-lang:logical-test> | 132 | ··········</cpe-lang:logical-test> |
| 133 | ········</cpe-lang:platform> | 133 | ········</cpe-lang:platform> |
| 134 | ········<cpe-lang:platform·id="package_iptables"> | 134 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 137 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 137 | ··········</cpe-lang:logical-test> | 139 | ··········</cpe-lang:logical-test> |
| 138 | ········</cpe-lang:platform> | 140 | ········</cpe-lang:platform> |
| 139 | ········<cpe-lang:platform·id=" | 141 | ········<cpe-lang:platform·id="package_dnf"> |
| 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 142 | ··········</cpe-lang:logical-test> | 144 | ··········</cpe-lang:logical-test> |
| 143 | ········</cpe-lang:platform> | 145 | ········</cpe-lang:platform> |
| 144 | ········<cpe-lang:platform·id=" | 146 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 148 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 147 | ··········</cpe-lang:logical-test> | 149 | ··········</cpe-lang:logical-test> |
| 148 | ········</cpe-lang:platform> | 150 | ········</cpe-lang:platform> |
| 149 | ········<cpe-lang:platform·id="machine_and_package_ | 151 | ········<cpe-lang:platform·id="machine_and_package_nftables_and_service_disabled_firewalld"> |
| 150 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 151 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 153 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 153 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 155 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 154 | ··········</cpe-lang:logical-test> | 156 | ··········</cpe-lang:logical-test> |
| 155 | ········</cpe-lang:platform> | 157 | ········</cpe-lang:platform> |
| 156 | ········<cpe-lang:platform·id="package_ | 158 | ········<cpe-lang:platform·id="package_sudo"> |
| 157 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 159 | ··········</cpe-lang:logical-test> | 161 | ··········</cpe-lang:logical-test> |
| 160 | ········</cpe-lang:platform> | 162 | ········</cpe-lang:platform> |
| 161 | ········<cpe-lang:platform·id=" | 163 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 166 | ··········</cpe-lang:logical-test> | ||
| 167 | ········</cpe-lang:platform> | ||
| 168 | ········<cpe-lang:platform·id="package_audit"> | ||
| 162 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 165 | ··········</cpe-lang:logical-test> | 171 | ··········</cpe-lang:logical-test> |
| 166 | ········</cpe-lang:platform> | 172 | ········</cpe-lang:platform> |
| 167 | ········<cpe-lang:platform·id="package_f | 173 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 168 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 176 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 177 | ············</cpe-lang:logical-test> | ||
| 178 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 179 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 180 | ············</cpe-lang:logical-test> | ||
| 170 | ··········</cpe-lang:logical-test> | 181 | ··········</cpe-lang:logical-test> |
| 171 | ········</cpe-lang:platform> | 182 | ········</cpe-lang:platform> |
| 172 | ········<cpe-lang:platform·id="machine_and_package_avahi"> | 183 | ········<cpe-lang:platform·id="machine_and_package_avahi"> |
| 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 184 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 185 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 175 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 176 | ··········</cpe-lang:logical-test> | 187 | ··········</cpe-lang:logical-test> |
| 177 | ········</cpe-lang:platform> | 188 | ········</cpe-lang:platform> |
| 189 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | ||
| 178 | ········<cpe-lang:platform·id="package_chrony"> | ||
| 179 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 181 | ··········</cpe-lang:logical-test> | ||
| 182 | ········</cpe-lang:platform> | ||
| 183 | ········<cpe-lang:platform·id="wifi-iface"> | ||
| 184 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 190 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 191 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 192 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 193 | ············</cpe-lang:logical-test> | ||
| 194 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 195 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 196 | ············</cpe-lang:logical-test> | ||
| 185 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 197 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| Max diff block lines reached; 1039827/1053270 bytes (98.72%) of diff not shown. | |||
| Offset 3, 2429 lines modified | Offset 3, 2429 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_hourly_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Verify· | 11 | ······<ocil:title>Verify·Owner·on·cron.hourly</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_ | 13 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_hourly_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_group_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Group·Who·Owns·Backup·group·File</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_sudoers_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure·auditd·Collects· | 23 | ······<ocil:title>Ensure·auditd·Collects·System·Administrator·Actions·-·/etc/sudoers</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_sudoers_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_passwd_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_kptr_restrict_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Restrict·Exposed·Kernel·Pointer·Addresses·Access</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_kptr_restrict_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_monthly_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify· | 35 | ······<ocil:title>Verify·Owner·on·cron.monthly</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-file_ | 37 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_monthly_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-s | 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_rhosts_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Disable· | 41 | ······<ocil:title>Disable·SSH·Support·for·.rhosts·Files</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-s | 43 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_rhosts_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-s | 46 | ····<ocil:questionnaire·id="ocil:ssg-set_loopback_traffic_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Set·configuration·for·loopback·traffic</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-s | 49 | ········<ocil:test_action_ref>ocil:ssg-set_loopback_traffic_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-s | 52 | ····<ocil:questionnaire·id="ocil:ssg-service_rsyslog_enabled_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Enable·rsyslog·Service</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-s | 55 | ········<ocil:test_action_ref>ocil:ssg-service_rsyslog_enabled_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_group_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_accept_source_route_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·all·IPv6·Interfaces</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_shadow_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Verify·Permissions·on·Backup·shadow·File</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_unlinkat_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_motd_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Verify·ownership·of·Message·of·the·Day·Banner</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_motd_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-service_named_disabled_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Disable·named·Service</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-service_named_disabled_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-s | 82 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_randomize_va_space_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Enable·Randomized·Layout·of·Virtual·Address·Space</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-s | 85 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_randomize_va_space_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ungroupowned_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Ensure·All·Files·Are·Owned·by·a·Group</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-file_ | 91 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ungroupowned_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_nodev_removable_partitions_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Configure·auditd·Max·Log·File·Size</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_max_log_file_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_at_allow_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Verify· | 101 | ······<ocil:title>Verify·Permissions·on·/etc/at.allow·file</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-file_ | 103 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_at_allow_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-a | 106 | ····<ocil:questionnaire·id="ocil:ssg-package_openldap-clients_removed_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure· | 107 | ······<ocil:title>Ensure·LDAP·client·is·not·installed</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-a | 109 | ········<ocil:test_action_ref>ocil:ssg-package_openldap-clients_removed_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-account_unique_id_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_source_route_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv4·Interfaces·by·Default</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-ensure_gpgcheck_never_disabled_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Ensure· | 119 | ······<ocil:title>Ensure·gpgcheck·Enabled·for·All·dnf·Package·Repositories</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-ensure_gpgcheck_never_disabled_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-grub2_audit_backlog_limit_argument_ocil:questionnaire:1"> | ||
| Max diff block lines reached; 532002/544650 bytes (97.68%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of | 7 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 144 lines modified | Offset 71, 144 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_bash"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id="package_ | 83 | ····<cpe-lang:platform·id="package_pam"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 88 | ····<cpe-lang:platform·id="uefi"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="package_iptables"> | 93 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="package_dnf"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="machine_and_package_ | 110 | ····<cpe-lang:platform·id="machine_and_package_nftables_and_service_disabled_firewalld"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="package_ | 117 | ····<cpe-lang:platform·id="package_sudo"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id=" | 122 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 123 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 125 | ······</cpe-lang:logical-test> | ||
| 126 | ····</cpe-lang:platform> | ||
| 127 | ····<cpe-lang:platform·id="package_audit"> | ||
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 124 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id="package_f | 132 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 135 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 136 | ········</cpe-lang:logical-test> | ||
| 137 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 139 | ········</cpe-lang:logical-test> | ||
| 129 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="machine_and_package_avahi"> | 142 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 135 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | ||
| 137 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 140 | ······</cpe-lang:logical-test> | ||
| 141 | ····</cpe-lang:platform> | ||
| 142 | ····<cpe-lang:platform·id="wifi-iface"> | ||
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 151 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 152 | ········</cpe-lang:logical-test> | ||
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 155 | ········</cpe-lang:logical-test> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 145 | ······</cpe-lang:logical-test> | 157 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 158 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id=" | 159 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 152 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 153 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 154 | ····<cpe-lang:platform·id=" | 165 | ····<cpe-lang:platform·id="machine"> |
| 155 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 157 | ······</cpe-lang:logical-test> | 168 | ······</cpe-lang:logical-test> |
| 158 | ····</cpe-lang:platform> | 169 | ····</cpe-lang:platform> |
| 159 | ····<cpe-lang:platform·id="package_ | 170 | ····<cpe-lang:platform·id="package_iptables"> |
| 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 162 | ······</cpe-lang:logical-test> | 173 | ······</cpe-lang:logical-test> |
| 163 | ····</cpe-lang:platform> | 174 | ····</cpe-lang:platform> |
| 164 | ····<cpe-lang:platform·id=" | 175 | ····<cpe-lang:platform·id="package_chrony"> |
| 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 166 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 167 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| Max diff block lines reached; 454977/469188 bytes (96.97%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:15.0"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:15.0"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·15.0</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·15.0</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap15:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap15:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.1"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.1"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.1</cpe-dict:title> |
| Offset 39, 17 lines modified | Offset 39, 17 lines modified | ||
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.3"> | 40 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.3"> |
| 41 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.3</cpe-dict:title> | 41 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.3</cpe-dict:title> |
| 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap42:def:1</cpe-dict:check> | 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap42:def:1</cpe-dict:check> |
| 43 | ······</cpe-dict:cpe-item> | 43 | ······</cpe-dict:cpe-item> |
| 44 | ····</cpe-dict:cpe-list> | 44 | ····</cpe-dict:cpe-list> |
| 45 | ··</ds:component> | 45 | ··</ds:component> |
| 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-xccdf.xml"·timestamp="2024-11-0 | 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 48 | ······<xccdf-1.2:status·date="2024-11-0 | 48 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> | 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> |
| 50 | ······<xccdf-1.2:description> | 50 | ······<xccdf-1.2:description> |
| 51 | ········This·guide·presents·a·catalog·of·security-relevant | 51 | ········This·guide·presents·a·catalog·of·security-relevant |
| 52 | configuration·settings·for·openSUSE.·It·is·a·rendering·of | 52 | configuration·settings·for·openSUSE.·It·is·a·rendering·of |
| 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 54 | in·order·to·support·security·automation.··The·SCAP·content·is | 54 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 55 | is·available·in·the | 55 | is·available·in·the |
| Offset 121, 80 lines modified | Offset 121, 75 lines modified | ||
| 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 122 | ······<cpe-lang:platform-specification> | 122 | ······<cpe-lang:platform-specification> |
| 123 | ········<cpe-lang:platform·id="package_pam"> | 123 | ········<cpe-lang:platform·id="package_pam"> |
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 126 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 127 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 128 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | ||
| 128 | ········<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 130 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 131 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 132 | ············</cpe-lang:logical-test> | ||
| 133 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 134 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 135 | ············</cpe-lang:logical-test> | ||
| 136 | ··········</cpe-lang:logical-test> | ||
| 137 | ········</cpe-lang:platform> | ||
| 138 | ········<cpe-lang:platform·id="package_systemd"> | ||
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 132 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 141 | ··········</cpe-lang:logical-test> | 133 | ··········</cpe-lang:logical-test> |
| 142 | ········</cpe-lang:platform> | 134 | ········</cpe-lang:platform> |
| 143 | ········<cpe-lang:platform·id=" | 135 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 144 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 137 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 146 | ··········</cpe-lang:logical-test> | 138 | ··········</cpe-lang:logical-test> |
| 147 | ········</cpe-lang:platform> | 139 | ········</cpe-lang:platform> |
| 148 | ········<cpe-lang:platform·id="g | 140 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 149 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 142 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 151 | ··········</cpe-lang:logical-test> | 143 | ··········</cpe-lang:logical-test> |
| 152 | ········</cpe-lang:platform> | 144 | ········</cpe-lang:platform> |
| 153 | ········<cpe-lang:platform·id=" | 145 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 154 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 156 | ··········</cpe-lang:logical-test> | 148 | ··········</cpe-lang:logical-test> |
| 157 | ········</cpe-lang:platform> | 149 | ········</cpe-lang:platform> |
| 158 | ········<cpe-lang:platform·id=" | 150 | ········<cpe-lang:platform·id="package_sudo"> |
| 159 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 161 | ··········</cpe-lang:logical-test> | 153 | ··········</cpe-lang:logical-test> |
| 162 | ········</cpe-lang:platform> | 154 | ········</cpe-lang:platform> |
| 163 | ········<cpe-lang:platform·id=" | 155 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 164 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 166 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 168 | ··········</cpe-lang:logical-test> | 158 | ··········</cpe-lang:logical-test> |
| 169 | ········</cpe-lang:platform> | 159 | ········</cpe-lang:platform> |
| 170 | ········<cpe-lang:platform·id="package_audit"> | 160 | ········<cpe-lang:platform·id="package_audit"> |
| 171 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 172 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 173 | ··········</cpe-lang:logical-test> | 163 | ··········</cpe-lang:logical-test> |
| 174 | ········</cpe-lang:platform> | 164 | ········</cpe-lang:platform> |
| 175 | ········<cpe-lang:platform·id="package_c | 165 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 176 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 168 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 169 | ············</cpe-lang:logical-test> | ||
| 170 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 171 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 172 | ············</cpe-lang:logical-test> | ||
| 178 | ··········</cpe-lang:logical-test> | 173 | ··········</cpe-lang:logical-test> |
| 179 | ········</cpe-lang:platform> | 174 | ········</cpe-lang:platform> |
| 180 | ········<cpe-lang:platform·id="machine_and_package_ufw"> | 175 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 181 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 182 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 184 | ··········</cpe-lang:logical-test> | 179 | ··········</cpe-lang:logical-test> |
| 185 | ········</cpe-lang:platform> | 180 | ········</cpe-lang:platform> |
| 186 | ········<cpe-lang:platform·id="package_sudo"> | ||
| 187 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 188 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 189 | ··········</cpe-lang:logical-test> | ||
| 190 | ········</cpe-lang:platform> | ||
| 191 | ········<cpe-lang:platform·id="aarch64_arch"> | 181 | ········<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 192 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 182 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 183 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 193 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 184 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 185 | ············</cpe-lang:logical-test> | ||
| 186 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 187 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 188 | ············</cpe-lang:logical-test> | ||
| 194 | ··········</cpe-lang:logical-test> | 189 | ··········</cpe-lang:logical-test> |
| 195 | ········</cpe-lang:platform> | 190 | ········</cpe-lang:platform> |
| 196 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 191 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 192 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 198 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 193 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 199 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 194 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 200 | ············</cpe-lang:logical-test> | 195 | ············</cpe-lang:logical-test> |
| Max diff block lines reached; 1181120/1193358 bytes (98.97%) of diff not shown. | |||
| Offset 3, 4677 lines modified | Offset 3, 4994 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-account_use_centralized_automated_auth_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Use·Centralized·and·Automated·Authentication</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-account_use_centralized_automated_auth_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_empty_passwords_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Disable·SSH·Access·via·Empty·Passwords</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_empty_passwords_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-dir_perms_world_writable_sticky_bits_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Verify·that·All·World-Writable·Directories·Have·Sticky·Bits·Set</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-dir_perms_world_writable_sticky_bits_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-sudo_custom_logfile_ocil:questionnaire:1"> | ||
| 29 | ······<ocil:title>Ensure·Sudo·Logfile·Exists·-·sudo·logfile</ocil:title> | ||
| 30 | ······<ocil:actions> | ||
| 31 | ········<ocil:test_action_ref>ocil:ssg-sudo_custom_logfile_action:testaction:1</ocil:test_action_ref> | ||
| 32 | ······</ocil:actions> | ||
| 33 | ····</ocil:questionnaire> | ||
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_specify_remote_server_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 11 | ······<ocil:title>A·remote·time·server·for·Chrony·is·configured</ocil:title> |
| 36 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-chronyd_specify_remote_server_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-package_openssh-server_installed_ocil:questionnaire:1"> | ||
| 41 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_requiretty_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure·Only·Users·Logged·In·To·Real·tty·Can·Execute·Sudo·-·sudo·requiretty</ocil:title> | ||
| 42 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_requiretty_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_audit_configuration_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 23 | ······<ocil:title>Audit·Configuration·Files·Must·Be·Owned·By·Root</ocil:title> |
| 48 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_audit_configuration_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-pa | 28 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_last_change_is_in_past_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Ensure·log | 29 | ······<ocil:title>Ensure·all·users·last·password·change·date·is·in·the·past</ocil:title> |
| 54 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-pa | 31 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_last_change_is_in_past_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-sshd_se | 34 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_x11_forwarding_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 35 | ······<ocil:title>Disable·X11·Forwarding</ocil:title> |
| 60 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-sshd_se | 37 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_x11_forwarding_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_group_ocil:questionnaire:1"> | ||
| 65 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-accounts_logon_fail_delay_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure·the·Logon·Failure·Delay·is·Set·Correctly·in·login.defs</ocil:title> | ||
| 66 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-accounts_logon_fail_delay_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-gid_passwd_group_same_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 47 | ······<ocil:title>All·GIDs·referenced·in·/etc/passwd·must·be·defined·in·/etc/group</ocil:title> |
| 72 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-gid_passwd_group_same_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_gshadow_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Verify· | 53 | ······<ocil:title>Verify·User·Who·Owns·gshadow·File</ocil:title> |
| 78 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_mail_alias_postmaster_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 59 | ······<ocil:title>Configure·System·to·Forward·All·Mail·From·Postmaster·to·The·Root·Account</ocil:title> |
| 84 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-postfix_client_configure_mail_alias_postmaster_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lchown_ocil:questionnaire:1"> | ||
| 89 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_passwd_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify·User·Who·Owns·Backup·passwd·File</ocil:title> | ||
| 90 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-audit | 70 | ····<ocil:questionnaire·id="ocil:ssg-auditd_freq_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 71 | ······<ocil:title>Set·number·of·records·to·cause·an·explicit·flush·to·audit·logs</ocil:title> |
| 96 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-audit | 73 | ········<ocil:test_action_ref>ocil:ssg-auditd_freq_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-no_rsh_trust_files_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Remove· | 77 | ······<ocil:title>Remove·Rsh·Trust·Files</ocil:title> |
| 102 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-no_rsh_trust_files_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-gnome_gdm_disable_xdmcp_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable· | 83 | ······<ocil:title>Disable·XDMCP·in·GDM</ocil:title> |
| 108 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-gnome_gdm_disable_xdmcp_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-no_all_squash_exports_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 89 | ······<ocil:title>Ensure·All-Squashing·Disabled·On·All·Exports</ocil:title> |
| 114 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-no_all_squash_exports_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-service_ip6tables_enabled_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Verify· | 95 | ······<ocil:title>Verify·ip6tables·Enabled·if·Using·IPv6</ocil:title> |
| 120 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-service_ip6tables_enabled_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_page_poisoning_no_sanity_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 101 | ······<ocil:title>Enable·poison·without·sanity·check</ocil:title> |
| 126 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| Max diff block lines reached; 652088/663855 bytes (98.23%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·openSUSE.·It·is·a·rendering·of | 7 | configuration·settings·for·openSUSE.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 76, 80 lines modified | Offset 76, 75 lines modified | ||
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_pam"> | 78 | ····<cpe-lang:platform·id="package_pam"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | ||
| 83 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 87 | ········</cpe-lang:logical-test> | ||
| 88 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 89 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 90 | ········</cpe-lang:logical-test> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id="g | 95 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="package_sudo"> |
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 116 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 117 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 118 | ····<cpe-lang:platform·id=" | 110 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 123 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="package_audit"> | 115 | ····<cpe-lang:platform·id="package_audit"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 128 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="package_c | 120 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 124 | ········</cpe-lang:logical-test> | ||
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ········</cpe-lang:logical-test> | ||
| 133 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="machine_and_package_ufw"> | 130 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="package_sudo"> | ||
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 144 | ······</cpe-lang:logical-test> | ||
| 145 | ····</cpe-lang:platform> | ||
| 146 | ····<cpe-lang:platform·id="aarch64_arch"> | 136 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 139 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 140 | ········</cpe-lang:logical-test> | ||
| 141 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 143 | ········</cpe-lang:logical-test> | ||
| 149 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 146 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 155 | ········</cpe-lang:logical-test> | 150 | ········</cpe-lang:logical-test> |
| Offset 161, 52 lines modified | Offset 156, 57 lines modified | ||
| 161 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | 157 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 163 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 166 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id="package_ | 163 | ····<cpe-lang:platform·id="package_systemd"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 166 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id=" | 168 | ····<cpe-lang:platform·id="machine"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 176 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 177 | ········</cpe-lang:logical-test> | ||
| 178 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 179 | ········ | 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 180 | ········</cpe-lang:logical-test> | ||
| 181 | ······</cpe-lang:logical-test> | 171 | ······</cpe-lang:logical-test> |
| 182 | ····</cpe-lang:platform> | 172 | ····</cpe-lang:platform> |
| Max diff block lines reached; 472457/484767 bytes (97.46%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-rhcos4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-rhcos4-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-rhcos4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-rhcos4-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-rhcos4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-rhcos4-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-rhcos4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-rhcos4-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-rhcos4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-rhcos4-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-rhcos4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-rhcos4-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-rhcos4-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-rhcos4-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:enterprise_linux_coreos:4"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:enterprise_linux_coreos:4"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·Enterprise·Linux·CoreOS·4</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·Enterprise·Linux·CoreOS·4</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml">oval:ssg-installed_OS_is_rhcos4:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml">oval:ssg-installed_OS_is_rhcos4:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-rhcos4-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-rhcos4-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2024-11-0 | 36 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of | 40 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 104, 336 lines modified | Offset 104, 336 lines modified | ||
| 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 110 | ······<cpe-lang:platform-specification> | 110 | ······<cpe-lang:platform-specification> |
| 111 | ········<cpe-lang:platform·id="package_bash"> | ||
| 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | ||
| 114 | ··········</cpe-lang:logical-test> | ||
| 115 | ········</cpe-lang:platform> | ||
| 111 | ········<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 116 | ········<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 118 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 114 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 119 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 115 | ············</cpe-lang:logical-test> | 120 | ············</cpe-lang:logical-test> |
| 116 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 117 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 119 | ··········</cpe-lang:logical-test> | 124 | ··········</cpe-lang:logical-test> |
| 120 | ········</cpe-lang:platform> | 125 | ········</cpe-lang:platform> |
| 121 | ········<cpe-lang:platform·id=" | 126 | ········<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 128 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 124 | ··········</cpe-lang:logical-test> | 129 | ··········</cpe-lang:logical-test> |
| 125 | ········</cpe-lang:platform> | 130 | ········</cpe-lang:platform> |
| 126 | ········<cpe-lang:platform·id=" | 131 | ········<cpe-lang:platform·id="machine_and_not_s390x_arch"> |
| 132 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 134 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 135 | ··········</cpe-lang:logical-test> | ||
| 136 | ········</cpe-lang:platform> | ||
| 137 | ········<cpe-lang:platform·id="package_sssd"> | ||
| 138 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 139 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_sssd:def:1"/> | ||
| 140 | ··········</cpe-lang:logical-test> | ||
| 141 | ········</cpe-lang:platform> | ||
| 142 | ········<cpe-lang:platform·id="not_aarch64_arch_and_machine_and_not_ppc64le_arch"> | ||
| 127 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 128 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 144 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 129 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 145 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 130 | ············</cpe-lang:logical-test> | 146 | ············</cpe-lang:logical-test> |
| 131 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 147 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 132 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_ | 148 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_ppc64le:def:1"/> |
| 133 | ············</cpe-lang:logical-test> | 149 | ············</cpe-lang:logical-test> |
| 150 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 134 | ··········</cpe-lang:logical-test> | 151 | ··········</cpe-lang:logical-test> |
| 135 | ········</cpe-lang:platform> | 152 | ········</cpe-lang:platform> |
| 136 | ········<cpe-lang:platform·id="package_ | 153 | ········<cpe-lang:platform·id="package_polkit"> |
| 137 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 155 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_polkit:def:1"/> |
| 139 | ··········</cpe-lang:logical-test> | 156 | ··········</cpe-lang:logical-test> |
| 140 | ········</cpe-lang:platform> | 157 | ········</cpe-lang:platform> |
| 141 | ········<cpe-lang:platform·id="package_p | 158 | ········<cpe-lang:platform·id="package_pam"> |
| 142 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_p | 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 144 | ··········</cpe-lang:logical-test> | 161 | ··········</cpe-lang:logical-test> |
| 145 | ········</cpe-lang:platform> | 162 | ········</cpe-lang:platform> |
| 146 | ········<cpe-lang:platform·id=" | 163 | ········<cpe-lang:platform·id="uefi"> |
| 147 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 150 | ··········</cpe-lang:logical-test> | 166 | ··········</cpe-lang:logical-test> |
| 151 | ········</cpe-lang:platform> | 167 | ········</cpe-lang:platform> |
| 152 | ········<cpe-lang:platform·id=" | 168 | ········<cpe-lang:platform·id="package_libreswan"> |
| 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 155 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> | ||
| 156 | ··········</cpe-lang:logical-test> | 171 | ··········</cpe-lang:logical-test> |
| 157 | ········</cpe-lang:platform> | 172 | ········</cpe-lang:platform> |
| 158 | ········<cpe-lang:platform·id="machine_and_n | 173 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 159 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 161 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> | ||
| 162 | ············</cpe-lang:logical-test> | ||
| 163 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 175 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 176 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 164 | ··········</cpe-lang:logical-test> | 178 | ··········</cpe-lang:logical-test> |
| 165 | ········</cpe-lang:platform> | 179 | ········</cpe-lang:platform> |
| 166 | ········<cpe-lang:platform·id=" | 180 | ········<cpe-lang:platform·id="machine_and_mount_home"> |
| 167 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 181 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 182 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 168 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 169 | ··········</cpe-lang:logical-test> | 184 | ··········</cpe-lang:logical-test> |
| 170 | ········</cpe-lang:platform> | 185 | ········</cpe-lang:platform> |
| 171 | ········<cpe-lang:platform·id=" | 186 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 172 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 187 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 188 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 174 | ··········</cpe-lang:logical-test> | 189 | ··········</cpe-lang:logical-test> |
| 175 | ········</cpe-lang:platform> | 190 | ········</cpe-lang:platform> |
| 176 | ········<cpe-lang:platform·id="package_ | 191 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 177 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 192 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 193 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 179 | ··········</cpe-lang:logical-test> | 194 | ··········</cpe-lang:logical-test> |
| 180 | ········</cpe-lang:platform> | 195 | ········</cpe-lang:platform> |
| 181 | ········<cpe-lang:platform·id=" | 196 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 182 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-sys | 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 184 | ··········</cpe-lang:logical-test> | 199 | ··········</cpe-lang:logical-test> |
| Max diff block lines reached; 1725761/1739391 bytes (99.22%) of diff not shown. | |||
| Offset 3, 4569 lines modified | Offset 3, 4569 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_login_events_faillock_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Record·Attempts·to·Alter·Logon·and·Logout·Events·-·faillock</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_login_events_faillock_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-zipl_systemd_debug-shell_argument_absent_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-restrict_serial_port_logins_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Restrict·Serial·Port·Root·Logins</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-restrict_serial_port_logins_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_syslog_plugin_activated_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_shells_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Verify·Who·Owns·/etc/shells·File</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_shells_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-a | 28 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_login_defs_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Ensure·the·Default·Umask·is·Set·Correctly·in·login.defs</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-a | 31 | ········<ocil:test_action_ref>ocil:ssg-accounts_umask_etc_login_defs_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-package_sendmail_removed_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Uninstall·Sendmail·Package</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-package_sendmail_removed_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_defaultnetstreamdriver_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_etc_gshadow_open_by_handle_at_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·via·open_by_handle_at·syscall·-·/etc/gshadow</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_etc_gshadow_open_by_handle_at_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_shells_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Verify·Permissions·on·/etc/shells·File</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_shells_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-service_chronyd_or_ntpd_enabled_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>En | 53 | ······<ocil:title>Enable·the·NTP·Daemon</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-service_chronyd_or_ntpd_enabled_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-zipl_audit_argument_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Enable·Auditing·to·Start·Prior·to·the·Audit·Daemon·in·zIPL</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-zipl_audit_argument_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_open_by_handle_at_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-directory_owner_etc_iptables_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify·User·Who·Owns·/etc/iptables·Directory</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-directory_owner_etc_iptables_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-s | 70 | ····<ocil:questionnaire·id="ocil:ssg-sudo_custom_logfile_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Ensure·Sudo·Logfile·Exists·-·sudo·logfile</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-s | 73 | ········<ocil:test_action_ref>ocil:ssg-sudo_custom_logfile_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-grub2_spectre_v2_argument_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Enforce·Spectre·v2·mitigation</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-grub2_spectre_v2_argument_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Configure·auditd·Max·Log·File·Size</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-audit_ | 85 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_max_log_file_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_writable_hooks_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_action_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Configure·auditd·max_log_file_action·Upon·Reaching·Maximum·Log·Size</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_max_log_file_action_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-package_net-snmp_removed_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Uninstall·net-snmp·Package</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-package_net-snmp_removed_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-directory_access_var_log_audit_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_seunshare_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Record·Any·Attempts·to·Run·seunshare</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-di | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_seunshare_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-directory_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-directory_groupowner_etc_sysctld_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Verify·Group·Who·Owns·/etc/sysctl.d·Directory</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-directory_ | 109 | ········<ocil:test_action_ref>ocil:ssg-directory_groupowner_etc_sysctld_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_pkexec_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_group_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Verify·User·Who·Owns·group·File</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_group_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-accounts_users_home_files_ownership_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>All·User·Files·and·Directories·In·The·Home·Directory·Must·Have·a·Valid·Owner</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-accounts_users_home_files_ownership_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| Max diff block lines reached; 1605495/1618130 bytes (99.22%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of | 7 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 336 lines modified | Offset 71, 336 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_bash"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 78 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 83 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 82 | ········</cpe-lang:logical-test> | 87 | ········</cpe-lang:logical-test> |
| 83 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 84 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 98 | ····<cpe-lang:platform·id="machine_and_not_s390x_arch"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 102 | ······</cpe-lang:logical-test> | ||
| 103 | ····</cpe-lang:platform> | ||
| 104 | ····<cpe-lang:platform·id="package_sssd"> | ||
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_sssd:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | ||
| 108 | ····</cpe-lang:platform> | ||
| 109 | ····<cpe-lang:platform·id="not_aarch64_arch_and_machine_and_not_ppc64le_arch"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 97 | ········</cpe-lang:logical-test> | 113 | ········</cpe-lang:logical-test> |
| 98 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 114 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_ | 115 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_ppc64le:def:1"/> |
| 100 | ········</cpe-lang:logical-test> | 116 | ········</cpe-lang:logical-test> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 101 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id="package_ | 120 | ····<cpe-lang:platform·id="package_polkit"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_polkit:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 123 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 124 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="package_p | 125 | ····<cpe-lang:platform·id="package_pam"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_p | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="uefi"> |
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 135 | ····<cpe-lang:platform·id="package_libreswan"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> | ||
| 123 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="machine_and_n | 140 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> | ||
| 129 | ········</cpe-lang:logical-test> | ||
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 131 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 132 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 133 | ····<cpe-lang:platform·id=" | 147 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 136 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 137 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 138 | ····<cpe-lang:platform·id=" | 153 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 141 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 143 | ····<cpe-lang:platform·id="package_ | 158 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 146 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id=" | 163 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-sys | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 151 | ······</cpe-lang:logical-test> | 166 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id=" | 168 | ····<cpe-lang:platform·id="package_tmux"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_tmux:def:1"/> |
| 156 | ······</cpe-lang:logical-test> | 171 | ······</cpe-lang:logical-test> |
| 157 | ····</cpe-lang:platform> | 172 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id="machine"> | 173 | ····<cpe-lang:platform·id="machine_and_mount_var-tmp"> |
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> | ||
| 161 | ······</cpe-lang:logical-test> | 177 | ······</cpe-lang:logical-test> |
| 162 | ····</cpe-lang:platform> | 178 | ····</cpe-lang:platform> |
| 163 | ····<cpe-lang:platform·id=" | 179 | ····<cpe-lang:platform·id="package_sudo"> |
| 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| Max diff block lines reached; 37129/51115 bytes (72.64%) of diff not shown. | |||
| Offset 3, 6907 lines modified | Offset 3, 6907 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_relayhost_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Configure·System·to·Forward·All·Mail·through·a·specific·host</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-postfix_client_configure_relayhost_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_home_directories_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>All·Interactive·User·Home·Directories·Must·Be·Owned·By·The·Primary·User</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_home_directories_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-accounts_polyinstantiated_tmp_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 11 | ······<ocil:title>Configure·Polyinstantiation·of·/tmp·Directories</ocil:title> |
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-accounts_polyinstantiated_tmp_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-coredump_disable_backtraces_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 17 | ······<ocil:title>Disable·core·dump·backtraces</ocil:title> |
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-coredump_disable_backtraces_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-tftpd_uses_secure_mode_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·tftp·Daemon·Uses·Secure·Mode</ocil:title> |
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-tftpd_uses_secure_mode_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_home_nosuid_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 29 | ······<ocil:title>Add·nosuid·Option·to·/home</ocil:title> |
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-mount_option_home_nosuid_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-package_libselinux_installed_ocil:questionnaire:1"> | ||
| 47 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_accept_redirects_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Disable·Accepting·ICMP·Redirects·for·All·IPv6·Interfaces</ocil:title> | ||
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_accept_redirects_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-di | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchown_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 41 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchown</ocil:title> |
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-di | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchown_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_immutable_ocil:questionnaire:1"> | ||
| 59 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-package_subscription-manager_installed_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Install·subscription-manager·Package</ocil:title> | ||
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-au | 49 | ········<ocil:test_action_ref>ocil:ssg-package_subscription-manager_installed_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-package_rsh_removed_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 53 | ······<ocil:title>Uninstall·rsh·Package</ocil:title> |
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-package_rsh_removed_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_reboot_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ena | 59 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·reboot</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_reboot_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_full_action_ocil:questionnaire:1"> | ||
| 77 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_notifiers_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Enable·checks·on·notifier·call·chains</ocil:title> | ||
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_notifiers_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_sha512_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 71 | ······<ocil:title>Sign·kernel·modules·with·SHA-512</ocil:title> |
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_sha512_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-sebool_login_console_enabled_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 77 | ······<ocil:title>Enable·the·login_console_enabled·SELinux·Boolean</ocil:title> |
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-sebool_login_console_enabled_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-grub2_systemd_debug-shell_argument_absent_ocil:questionnaire:1"> | ||
| 95 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_issue_net_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Verify·ownership·of·System·Login·Banner·for·Remote·Connections</ocil:title> | ||
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_issue_net_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_postqueue_ocil:questionnaire:1"> | ||
| 101 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_disable_ipv6_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable·IPv6·Addressing·on·IPv6·Interfaces·by·Default</ocil:title> | ||
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_disable_ipv6_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-etc_system_fips_exists_ocil:questionnaire:1"> | ||
| 107 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-ensure_gpgcheck_globally_activated_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·gpgcheck·Enabled·In·Main·yum·Configuration</ocil:title> | ||
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-e | 97 | ········<ocil:test_action_ref>ocil:ssg-ensure_gpgcheck_globally_activated_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_media_export_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 101 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Exporting·to·Media·(successful)</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_media_export_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-selinux_user_login_roles_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 107 | ······<ocil:title>Map·System·Users·To·The·Appropriate·SELinux·Role</ocil:title> |
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-selinux_user_login_roles_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| Max diff block lines reached; 1569673/1582008 bytes (99.22%) of diff not shown. | |||
| Offset 3, 9546 lines modified | Offset 3, 9546 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-grub2_systemd_debug-shell_argument_absent_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Ensure·debug-shell·service·is·not·enabled·during·boot</ocil:title> | ||
| 10 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_send_redirects_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Disable·Kernel·Parameter·for·Sending·ICMP·Redirects·on·all·IPv4·Interfaces·by·Default</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_send_redirects_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-rpm_verify_ownership_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Verify·and·Correct·Ownership·with·RPM</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-r | 13 | ········<ocil:test_action_ref>ocil:ssg-grub2_systemd_debug-shell_argument_absent_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-grub2_rng_core_default_quality_argument_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Configure·the·confidence·in·TPM·for·entropy</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-grub2_rng_core_default_quality_argument_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-banner_etc_issue_net_ocil:questionnaire:1"> | ||
| 29 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_redirects_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·ICMP·Redirects·by·Default·on·IPv4·Interfaces</ocil:title> | ||
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_accept_redirects_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-account_passwords_pam_faillock_audit_ocil:questionnaire:1"> | ||
| 35 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-sudo_require_reauthentication_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Require·Re-Authentication·When·Using·the·sudo·Command</ocil:title> | ||
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sudo_require_reauthentication_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-dir_system_commands_group_root_owned_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Verify· | 35 | ······<ocil:title>Verify·that·system·commands·directories·have·root·as·a·group·owner</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-dir_system_commands_group_root_owned_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_ | 40 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_disable_ipv6_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 41 | ······<ocil:title>Disable·IPv6·Addressing·on·All·IPv6·Interfaces</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_ | 43 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_disable_ipv6_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-di | 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_chsh_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 47 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·chsh</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-di | 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_chsh_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_groupownership_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Ensure· | 53 | ······<ocil:title>Ensure·Log·Files·Are·Owned·By·Appropriate·Group</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_groupownership_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_chmod_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Record·Any·Attempts·to·Run·chmod</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_chmod_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-package_libreswan_installed_ocil:questionnaire:1"> | ||
| 71 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure·Rsyslog·Encrypts·Off-Loaded·Audit·Records</ocil:title> | ||
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_action_stig_ocil:questionnaire:1"> | ||
| 77 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_compression_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Disable·Compression·Or·Set·Compression·to·delayed</ocil:title> | ||
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_compression_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-package_avahi_removed_ocil:questionnaire:1"> | ||
| 83 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_set_min_life_existing_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Set·Existing·Passwords·Minimum·Age</ocil:title> | ||
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_set_min_life_existing_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_pid_max_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 83 | ······<ocil:title>Configure·maximum·number·of·process·identifiers</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_pid_max_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_ra_pinfo_ocil:questionnaire:1"> | ||
| 95 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_tally2_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Set·Deny·For·Failed·Password·Attempts</ocil:title> | ||
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_tally2_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-require_emergency_target_auth_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 95 | ······<ocil:title>Require·Authentication·for·Emergency·Systemd·Target</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-require_emergency_target_auth_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_world_writable_ocil:questionnaire:1"> | ||
| 107 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_empty_passwords_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Disable·SSH·Access·via·Empty·Passwords</ocil:title> | ||
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_empty_passwords_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_dev_shm_nosuid_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 107 | ······<ocil:title>Add·nosuid·Option·to·/dev/shm</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-mount_option_dev_shm_nosuid_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-sshd_allow_only_protocol2_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 113 | ······<ocil:title>Allow·Only·SSH·Protocol·2</ocil:title> |
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| Max diff block lines reached; 1793813/1806257 bytes (99.31%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.3"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.3"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.3</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.3</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.4"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.4"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.4</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.4</cpe-dict:title> |
| Offset 39, 17 lines modified | Offset 39, 17 lines modified | ||
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-microos:5.2"> | 40 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-microos:5.2"> |
| 41 | ········<cpe-dict:title·xml:lang="en-us">SLE·MicroOS·5.2</cpe-dict:title> | 41 | ········<cpe-dict:title·xml:lang="en-us">SLE·MicroOS·5.2</cpe-dict:title> |
| 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> | 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> |
| 43 | ······</cpe-dict:cpe-item> | 43 | ······</cpe-dict:cpe-item> |
| 44 | ····</cpe-dict:cpe-list> | 44 | ····</cpe-dict:cpe-list> |
| 45 | ··</ds:component> | 45 | ··</ds:component> |
| 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-xccdf.xml"·timestamp="2024-11-0 | 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 48 | ······<xccdf-1.2:status·date="2024-11-0 | 48 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> | 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> |
| 50 | ······<xccdf-1.2:description> | 50 | ······<xccdf-1.2:description> |
| 51 | ········This·guide·presents·a·catalog·of·security-relevant | 51 | ········This·guide·presents·a·catalog·of·security-relevant |
| 52 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of | 52 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of |
| 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 54 | in·order·to·support·security·automation.··The·SCAP·content·is | 54 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 55 | is·available·in·the | 55 | is·available·in·the |
| Offset 121, 27 lines modified | Offset 121, 27 lines modified | ||
| 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 122 | ······<cpe-lang:platform-specification> | 122 | ······<cpe-lang:platform-specification> |
| 123 | ········<cpe-lang:platform·id="package_pam"> | 123 | ········<cpe-lang:platform·id="package_pam"> |
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 126 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 127 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 128 | ········<cpe-lang:platform·id=" | 128 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 131 | ··········</cpe-lang:logical-test> | 131 | ··········</cpe-lang:logical-test> |
| 132 | ········</cpe-lang:platform> | 132 | ········</cpe-lang:platform> |
| 133 | ········<cpe-lang:platform·id="package_audit"> | 133 | ········<cpe-lang:platform·id="package_audit"> |
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 136 | ··········</cpe-lang:logical-test> | 136 | ··········</cpe-lang:logical-test> |
| 137 | ········</cpe-lang:platform> | 137 | ········</cpe-lang:platform> |
| 138 | ········<cpe-lang:platform·id=" | 138 | ········<cpe-lang:platform·id="machine"> |
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 141 | ··········</cpe-lang:logical-test> | 141 | ··········</cpe-lang:logical-test> |
| 142 | ········</cpe-lang:platform> | 142 | ········</cpe-lang:platform> |
| 143 | ······</cpe-lang:platform-specification> | 143 | ······</cpe-lang:platform-specification> |
| 144 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> | 144 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> |
| 145 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> | 145 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> |
| 146 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> | 146 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> |
| 147 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> | 147 | ······<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> |
| Offset 704, 14 lines modified | Offset 704, 61 lines modified | ||
| 704 | ················<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00226</xccdf-1.2:reference> | 704 | ················<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00226</xccdf-1.2:reference> |
| 705 | ················<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-412025</xccdf-1.2:reference> | 705 | ················<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-412025</xccdf-1.2:reference> |
| 706 | ················<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261365r996541_rule</xccdf-1.2:reference> | 706 | ················<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261365r996541_rule</xccdf-1.2:reference> |
| 707 | ················<xccdf-1.2:rationale>Limiting·the·number·of·logon·attempts·over·a·certain·time·interval·reduces | 707 | ················<xccdf-1.2:rationale>Limiting·the·number·of·logon·attempts·over·a·certain·time·interval·reduces |
| 708 | the·chances·that·an·unauthorized·user·may·gain·access·to·an·account.</xccdf-1.2:rationale> | 708 | the·chances·that·an·unauthorized·user·may·gain·access·to·an·account.</xccdf-1.2:rationale> |
| 709 | ················<xccdf-1.2:platform·idref="#package_pam"/> | 709 | ················<xccdf-1.2:platform·idref="#package_pam"/> |
| 710 | ················<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94092-4</xccdf-1.2:ident> | 710 | ················<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94092-4</xccdf-1.2:ident> |
| 711 | ················<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="accounts_passwords_pam_faildelay_delay"> | ||
| 712 | ··················#·Remediation·is·applicable·only·in·certain·platforms | ||
| 713 | if·rpm·--quiet·-q·pam;·then | ||
| 714 | var_password_pam_delay=' | ||
| 715 | ··················<xccdf-1.2:sub·idref="xccdf_org.ssgproject.content_value_var_password_pam_delay"·use="legacy"/> | ||
| 716 | ··················' | ||
| 717 | if·[·-e·"/etc/pam.d/common-auth"·]·;·then | ||
| 718 | ····valueRegex="$var_password_pam_delay"·defaultValue="$var_password_pam_delay" | ||
| 719 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 720 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 721 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 722 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 723 | ····#·fix·'type'·if·it's·wrong | ||
| 724 | ····if·grep·-q·-P·"^\\s*(?"'!'"auth\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·;·then | ||
| 725 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum:]]+\\s+pam_faildelay.so)/\\1auth\\2/"·"/etc/pam.d/common-auth" | ||
| 726 | ····fi | ||
| 727 | ····#·fix·'control'·if·it's·wrong | ||
| 728 | ····if·grep·-q·-P·"^\\s*auth\\s+(?"'!'"required)[[:alnum:]]+\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·;·then | ||
| 729 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+)[[:alnum:]]+(\\s+pam_faildelay.so)/\\1required\\2/"·"/etc/pam.d/common-auth" | ||
| 730 | ····fi | ||
| 731 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 732 | ····if·grep·-q·-P·"^\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s+delay(?"'!'"${valueRegex}(\\s|\$))"·<·"/etc/pam.d/common-auth"·;·then | ||
| 733 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s)delay=[^[:space:]]*/\\1delay${defaultValue}/"·"/etc/pam.d/common-auth" | ||
| 734 | ····#·add·'option=default'·if·option·is·not·set | ||
| 735 | ····elif·grep·-q·-E·"^\\s*auth\\s+required\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·&& | ||
| 736 | ············grep····-E·"^\\s*auth\\s+required\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·|·grep·-q·-E·-v·"\\sdelay(=|\\s|\$)"·;·then | ||
| 737 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+required\\s+pam_faildelay.so[^\\n]*)/\\1·delay${defaultValue}/"·"/etc/pam.d/common-auth" | ||
| 738 | ····#·add·a·new·entry·if·none·exists | ||
| 739 | ····elif·!·grep·-q·-P·"^\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s+delay${valueRegex}(\\s|\$)"·<·"/etc/pam.d/common-auth"·;·then | ||
| 740 | ········echo·"auth·required·pam_faildelay.so·delay${defaultValue}"·>>·"/etc/pam.d/common-auth" | ||
| 741 | ····fi | ||
| 742 | else | ||
| 743 | ····echo·"/etc/pam.d/common-auth·doesn't·exist"·>&2 | ||
| 744 | fi | ||
| 745 | else | ||
| 746 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 747 | fi | ||
| 748 | ················</xccdf-1.2:fix> | ||
| 711 | ················<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="accounts_passwords_pam_faildelay_delay"·complexity="low"·disruption="low"·reboot="false"·strategy="restrict"> | 749 | ················<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="accounts_passwords_pam_faildelay_delay"·complexity="low"·disruption="low"·reboot="false"·strategy="restrict"> |
| 712 | ··················-·name:·Gather·the·package·facts | 750 | ··················-·name:·Gather·the·package·facts |
| 713 | ··package_facts: | 751 | ··package_facts: |
| 714 | ····manager:·auto | 752 | ····manager:·auto |
| 715 | ··tags: | 753 | ··tags: |
| 716 | ··-·CCE-94092-4 | 754 | ··-·CCE-94092-4 |
| 717 | ··-·DISA-STIG-SLEM-05-412025 | 755 | ··-·DISA-STIG-SLEM-05-412025 |
| Offset 844, 61 lines modified | Offset 891, 14 lines modified | ||
| 844 | ··-·accounts_passwords_pam_faildelay_delay | 891 | ··-·accounts_passwords_pam_faildelay_delay |
| 845 | ··-·low_complexity | 892 | ··-·low_complexity |
| 846 | ··-·low_disruption | 893 | ··-·low_disruption |
| Max diff block lines reached; 793314/802789 bytes (98.82%) of diff not shown. | |||
| Offset 3, 437 lines modified | Offset 3, 437 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_usermod_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-· | 11 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·usermod</ocil:title> |
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_rmmod_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_sudoedit_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·sudoedit</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_usermod_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_ | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_semanage_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Record·Any·Attempts·to·Run· | 17 | ······<ocil:title>Record·Any·Attempts·to·Run·semanage</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_ | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_semanage_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_s | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ssh_agent_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 23 | ······<ocil:title>Record·Any·Attempts·to·Run·ssh-agent</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_s | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ssh_agent_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_insmod_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-· | 29 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·insmod</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_insmod_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_x11_forwarding_ocil:questionnaire:1"> | ||
| 41 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_tally2_file_selinux_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>An·SELinux·Context·must·be·configured·for·default·pam_tally2·file·option</ocil:title> | ||
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-ss | 37 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_tally2_file_selinux_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_e | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_chage_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 41 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·chage</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_e | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_chage_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_unix_chkpwd_ocil:questionnaire:1"> | ||
| 53 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_user_known_hosts_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable·SSH·Support·for·User·Known·Hosts</ocil:title> | ||
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_user_known_hosts_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_e | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_kmod_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 53 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·kmod</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_e | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_kmod_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_setsebool_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Record·Any·Attempts·to·Run·s | 59 | ······<ocil:title>Record·Any·Attempts·to·Run·setsebool</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_setsebool_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_e | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_sudoedit_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 65 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·sudoedit</ocil:title> |
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_e | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_sudoedit_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_rmmod_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-· | 71 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·rmmod</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_rmmod_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-sshd_ | 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Enable·SSH·Warning·Banner</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-sshd_ | 79 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_warning_banner_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_login_ocil:questionnaire:1"> | 82 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_login_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable·SSH·Root·Login</ocil:title> | 83 | ······<ocil:title>Disable·SSH·Root·Login</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_login_action:testaction:1</ocil:test_action_ref> | 85 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_login_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_crontab_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-· | 89 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·crontab</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_crontab_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-package_audit-audispd-plugins_installed_ocil:questionnaire:1"> | ||
| 101 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ssh_keysign_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·ssh-keysign</ocil:title> | ||
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ssh_keysign_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_passwd_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·passwd</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_passwd_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_ocil:questionnaire:1"> | ||
| 113 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_modprobe_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·modprobe</ocil:title> | ||
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_modprobe_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_verbose_ocil:questionnaire:1"> | ||
| 119 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_unix_chkpwd_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·unix_chkpwd</ocil:title> | ||
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_unix_chkpwd_action:testaction:1</ocil:test_action_ref> | ||
| 116 | ······</ocil:actions> | ||
| 117 | ····</ocil:questionnaire> | ||
| 118 | ····<ocil:questionnaire·id="ocil:ssg-installed_OS_is_vendor_supported_ocil:questionnaire:1"> | ||
| Max diff block lines reached; 86564/99670 bytes (86.85%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of | 7 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 76, 27 lines modified | Offset 76, 27 lines modified | ||
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_pam"> | 78 | ····<cpe-lang:platform·id="package_pam"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_audit"> | 88 | ····<cpe-lang:platform·id="package_audit"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="machine"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 98 | ··</cpe-lang:platform-specification> | 98 | ··</cpe-lang:platform-specification> |
| 99 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> | 99 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-microos:5.2"/> |
| 100 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> | 100 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.3"/> |
| 101 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> | 101 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.4"/> |
| 102 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> | 102 | ··<xccdf-1.2:platform·idref="cpe:/o:suse:sle-micro:5.5"/> |
| Offset 659, 14 lines modified | Offset 659, 61 lines modified | ||
| 659 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00226</xccdf-1.2:reference> | 659 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00226</xccdf-1.2:reference> |
| 660 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-412025</xccdf-1.2:reference> | 660 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-412025</xccdf-1.2:reference> |
| 661 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261365r996541_rule</xccdf-1.2:reference> | 661 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261365r996541_rule</xccdf-1.2:reference> |
| 662 | ············<xccdf-1.2:rationale>Limiting·the·number·of·logon·attempts·over·a·certain·time·interval·reduces | 662 | ············<xccdf-1.2:rationale>Limiting·the·number·of·logon·attempts·over·a·certain·time·interval·reduces |
| 663 | the·chances·that·an·unauthorized·user·may·gain·access·to·an·account.</xccdf-1.2:rationale> | 663 | the·chances·that·an·unauthorized·user·may·gain·access·to·an·account.</xccdf-1.2:rationale> |
| 664 | ············<xccdf-1.2:platform·idref="#package_pam"/> | 664 | ············<xccdf-1.2:platform·idref="#package_pam"/> |
| 665 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94092-4</xccdf-1.2:ident> | 665 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94092-4</xccdf-1.2:ident> |
| 666 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="accounts_passwords_pam_faildelay_delay"> | ||
| 667 | ··············#·Remediation·is·applicable·only·in·certain·platforms | ||
| 668 | if·rpm·--quiet·-q·pam;·then | ||
| 669 | var_password_pam_delay=' | ||
| 670 | ··············<xccdf-1.2:sub·idref="xccdf_org.ssgproject.content_value_var_password_pam_delay"·use="legacy"/> | ||
| 671 | ··············' | ||
| 672 | if·[·-e·"/etc/pam.d/common-auth"·]·;·then | ||
| 673 | ····valueRegex="$var_password_pam_delay"·defaultValue="$var_password_pam_delay" | ||
| 674 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 675 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 676 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 677 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 678 | ····#·fix·'type'·if·it's·wrong | ||
| 679 | ····if·grep·-q·-P·"^\\s*(?"'!'"auth\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·;·then | ||
| 680 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum:]]+\\s+pam_faildelay.so)/\\1auth\\2/"·"/etc/pam.d/common-auth" | ||
| 681 | ····fi | ||
| 682 | ····#·fix·'control'·if·it's·wrong | ||
| 683 | ····if·grep·-q·-P·"^\\s*auth\\s+(?"'!'"required)[[:alnum:]]+\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·;·then | ||
| 684 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+)[[:alnum:]]+(\\s+pam_faildelay.so)/\\1required\\2/"·"/etc/pam.d/common-auth" | ||
| 685 | ····fi | ||
| 686 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 687 | ····if·grep·-q·-P·"^\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s+delay(?"'!'"${valueRegex}(\\s|\$))"·<·"/etc/pam.d/common-auth"·;·then | ||
| 688 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s)delay=[^[:space:]]*/\\1delay${defaultValue}/"·"/etc/pam.d/common-auth" | ||
| 689 | ····#·add·'option=default'·if·option·is·not·set | ||
| 690 | ····elif·grep·-q·-E·"^\\s*auth\\s+required\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·&& | ||
| 691 | ············grep····-E·"^\\s*auth\\s+required\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·|·grep·-q·-E·-v·"\\sdelay(=|\\s|\$)"·;·then | ||
| 692 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*auth\\s+required\\s+pam_faildelay.so[^\\n]*)/\\1·delay${defaultValue}/"·"/etc/pam.d/common-auth" | ||
| 693 | ····#·add·a·new·entry·if·none·exists | ||
| 694 | ····elif·!·grep·-q·-P·"^\\s*auth\\s+required\\s+pam_faildelay.so(\\s.+)?\\s+delay${valueRegex}(\\s|\$)"·<·"/etc/pam.d/common-auth"·;·then | ||
| 695 | ········echo·"auth·required·pam_faildelay.so·delay${defaultValue}"·>>·"/etc/pam.d/common-auth" | ||
| 696 | ····fi | ||
| 697 | else | ||
| 698 | ····echo·"/etc/pam.d/common-auth·doesn't·exist"·>&2 | ||
| 699 | fi | ||
| 700 | else | ||
| 701 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 702 | fi | ||
| 703 | ············</xccdf-1.2:fix> | ||
| 666 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="accounts_passwords_pam_faildelay_delay"·complexity="low"·disruption="low"·reboot="false"·strategy="restrict"> | 704 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="accounts_passwords_pam_faildelay_delay"·complexity="low"·disruption="low"·reboot="false"·strategy="restrict"> |
| 667 | ··············-·name:·Gather·the·package·facts | 705 | ··············-·name:·Gather·the·package·facts |
| 668 | ··package_facts: | 706 | ··package_facts: |
| 669 | ····manager:·auto | 707 | ····manager:·auto |
| 670 | ··tags: | 708 | ··tags: |
| 671 | ··-·CCE-94092-4 | 709 | ··-·CCE-94092-4 |
| 672 | ··-·DISA-STIG-SLEM-05-412025 | 710 | ··-·DISA-STIG-SLEM-05-412025 |
| Offset 799, 61 lines modified | Offset 846, 14 lines modified | ||
| 799 | ··-·accounts_passwords_pam_faildelay_delay | 846 | ··-·accounts_passwords_pam_faildelay_delay |
| 800 | ··-·low_complexity | 847 | ··-·low_complexity |
| 801 | ··-·low_disruption | 848 | ··-·low_disruption |
| 802 | ··-·medium_severity | 849 | ··-·medium_severity |
| 803 | ··-·no_reboot_needed | 850 | ··-·no_reboot_needed |
| 804 | ··-·restrict_strategy | 851 | ··-·restrict_strategy |
| 805 | ············</xccdf-1.2:fix> | 852 | ············</xccdf-1.2:fix> |
| 806 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:sh"·id="accounts_passwords_pam_faildelay_delay"> | ||
| 807 | ··············#·Remediation·is·applicable·only·in·certain·platforms | ||
| 808 | if·rpm·--quiet·-q·pam;·then | ||
| 809 | var_password_pam_delay=' | ||
| 810 | ··············<xccdf-1.2:sub·idref="xccdf_org.ssgproject.content_value_var_password_pam_delay"·use="legacy"/> | ||
| 811 | ··············' | ||
| 812 | if·[·-e·"/etc/pam.d/common-auth"·]·;·then | ||
| 813 | ····valueRegex="$var_password_pam_delay"·defaultValue="$var_password_pam_delay" | ||
| 814 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 815 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 816 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 817 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 818 | ····#·fix·'type'·if·it's·wrong | ||
| 819 | ····if·grep·-q·-P·"^\\s*(?"'!'"auth\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_faildelay.so"·<·"/etc/pam.d/common-auth"·;·then | ||
| 820 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum:]]+\\s+pam_faildelay.so)/\\1auth\\2/"·"/etc/pam.d/common-auth" | ||
| Max diff block lines reached; 668369/679132 bytes (98.42%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-uos20-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-uos20-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-uos20-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-uos20-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-uos20-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-uos20-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-uos20-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-uos20-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-uos20-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-uos20-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-uos20-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-uos20-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-uos20-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-uos20-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:uos:uniontech_os_server:20"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:uos:uniontech_os_server:20"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">UnionTech·OS·Server·20</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">UnionTech·OS·Server·20</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml">oval:ssg-installed_OS_is_uos20:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml">oval:ssg-installed_OS_is_uos20:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-uos20-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-uos20-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2024-11-0 | 36 | ······<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of | 40 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 109, 91 lines modified | Offset 109, 75 lines modified | ||
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 110 | ······<cpe-lang:platform-specification> | 110 | ······<cpe-lang:platform-specification> |
| 111 | ········<cpe-lang:platform·id="package_pam"> | 111 | ········<cpe-lang:platform·id="package_pam"> |
| 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 114 | ··········</cpe-lang:logical-test> | 114 | ··········</cpe-lang:logical-test> |
| 115 | ········</cpe-lang:platform> | 115 | ········</cpe-lang:platform> |
| 116 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | ||
| 116 | ········<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 118 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 119 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 120 | ············</cpe-lang:logical-test> | ||
| 121 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 122 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 123 | ············</cpe-lang:logical-test> | ||
| 124 | ··········</cpe-lang:logical-test> | ||
| 125 | ········</cpe-lang:platform> | ||
| 126 | ········<cpe-lang:platform·id="package_systemd"> | ||
| 127 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 128 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 129 | ··········</cpe-lang:logical-test> | ||
| 130 | ········</cpe-lang:platform> | ||
| 131 | ········<cpe-lang:platform·id="package_postfix"> | ||
| 132 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_p | 119 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 120 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 134 | ··········</cpe-lang:logical-test> | 121 | ··········</cpe-lang:logical-test> |
| 135 | ········</cpe-lang:platform> | 122 | ········</cpe-lang:platform> |
| 136 | ········<cpe-lang:platform·id=" | 123 | ········<cpe-lang:platform·id="aarch64_arch"> |
| 137 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 139 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 140 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 141 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 142 | ········<cpe-lang:platform·id="g | 128 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 143 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 144 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 145 | ··········</cpe-lang:logical-test> | 131 | ··········</cpe-lang:logical-test> |
| 146 | ········</cpe-lang:platform> | 132 | ········</cpe-lang:platform> |
| 147 | ········<cpe-lang:platform·id=" | 133 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 148 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 150 | ··········</cpe-lang:logical-test> | 136 | ··········</cpe-lang:logical-test> |
| 151 | ········</cpe-lang:platform> | 137 | ········</cpe-lang:platform> |
| 152 | ········<cpe-lang:platform·id=" | 138 | ········<cpe-lang:platform·id="package_sudo"> |
| 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 155 | ··········</cpe-lang:logical-test> | 141 | ··········</cpe-lang:logical-test> |
| 156 | ········</cpe-lang:platform> | 142 | ········</cpe-lang:platform> |
| 157 | ········<cpe-lang:platform·id=" | 143 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 158 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 144 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 145 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 161 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 162 | ··········</cpe-lang:logical-test> | 146 | ··········</cpe-lang:logical-test> |
| 163 | ········</cpe-lang:platform> | 147 | ········</cpe-lang:platform> |
| 164 | ········<cpe-lang:platform·id="package_audit"> | 148 | ········<cpe-lang:platform·id="package_audit"> |
| 165 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 166 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 150 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 167 | ··········</cpe-lang:logical-test> | 151 | ··········</cpe-lang:logical-test> |
| 168 | ········</cpe-lang:platform> | 152 | ········</cpe-lang:platform> |
| 153 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 169 | ········<cpe-lang:platform·id="package_chrony"> | ||
| 170 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 171 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 172 | ··········</cpe-lang:logical-test> | ||
| 173 | ········</cpe-lang:platform> | ||
| 174 | ········<cpe-lang:platform·id="package_yum"> | ||
| 175 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 156 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 157 | ············</cpe-lang:logical-test> | ||
| 158 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 176 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 159 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 160 | ············</cpe-lang:logical-test> | ||
| 177 | ··········</cpe-lang:logical-test> | 161 | ··········</cpe-lang:logical-test> |
| 178 | ········</cpe-lang:platform> | 162 | ········</cpe-lang:platform> |
| 179 | ········<cpe-lang:platform·id="machine_and_package_ufw"> | 163 | ········<cpe-lang:platform·id="machine_and_package_ufw"> |
| 180 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 181 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 182 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 166 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 183 | ··········</cpe-lang:logical-test> | 167 | ··········</cpe-lang:logical-test> |
| 184 | ········</cpe-lang:platform> | 168 | ········</cpe-lang:platform> |
| 185 | ········<cpe-lang:platform·id="package_sudo"> | ||
| 186 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 187 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 188 | ··········</cpe-lang:logical-test> | ||
| 189 | ········</cpe-lang:platform> | ||
| 190 | ········<cpe-lang:platform·id="aarch64_arch"> | 169 | ········<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 191 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 170 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 192 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 172 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 173 | ············</cpe-lang:logical-test> | ||
| 174 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 175 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 176 | ············</cpe-lang:logical-test> | ||
| 193 | ··········</cpe-lang:logical-test> | 177 | ··········</cpe-lang:logical-test> |
| 194 | ········</cpe-lang:platform> | 178 | ········</cpe-lang:platform> |
| 195 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 179 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| Max diff block lines reached; 1276633/1288828 bytes (99.05%) of diff not shown. | |||
| Offset 3, 4311 lines modified | Offset 3, 4311 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_home_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Ensure·/home·Located·On·Separate·Partition</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-partition_for_home_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_groupownership_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Ensure·Log·Files·Are·Owned·By·Appropriate·Group</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_groupownership_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_private_key_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Verify·Group·Ownership·on·SSH·Server·Private·*_key·Key·Files</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-n | 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_binfmt_misc_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Disable·kernel·support·for·MISC·binaries</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-n | 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_binfmt_misc_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-configure_user_data_backups_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Configure·Backups·of·User·Data</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-configure_user_data_backups_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_renameat_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-account_passwords_pam_faillock_dir_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Account·Lockouts·Must·Persist</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-a | 43 | ········<ocil:test_action_ref>ocil:ssg-account_passwords_pam_faillock_dir_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-s | 46 | ····<ocil:questionnaire·id="ocil:ssg-restrict_serial_port_logins_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Restrict·Serial·Port·Root·Logins</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-s | 49 | ········<ocil:test_action_ref>ocil:ssg-restrict_serial_port_logins_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_setxattr_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Ena | 53 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·setxattr</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_setxattr_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmep_argument_absent_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_x11_forwarding_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Enable·Encrypted·X11·Forwarding</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_x11_forwarding_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_max_concurrent_login_sessions_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_reboot_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·reboot</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-a | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_reboot_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-no_netrc_files_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Verify·No·netrc·Files·Exist</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-no_netrc_files_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-sudoers_no_command_negation_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Don't·define·allowed·commands·in·sudoers·by·means·of·exclusion</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-sudoers_no_command_negation_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_kexec_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Disable·kexec·system·call</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_kexec_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-· | 89 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount2</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_ | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount2_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_strictmodes_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Enable·Use·of·Strict·Mode·Checking</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_strictmodes_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-grub2_l1tf_argument_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_disable_ipv6_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Disable·IPv6·Addressing·on·IPv6·Interfaces·by·Default</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_disable_ipv6_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_ipv6_option_disabled_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Disable·IPv6·Networking·Support·Automatic·Loading</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_ipv6_option_disabled_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_warn_age_login_defs_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_x86_vsyscall_emulation_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Disable·x86·vsyscall·emulation</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_x86_vsyscall_emulation_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_sha512_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Sign·kernel·modules·with·SHA-512</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_sha512_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-dir_perms_world_writable_sticky_bits_ocil:questionnaire:1"> | ||
| Max diff block lines reached; 709586/722408 bytes (98.23%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="2024-11-0 | 3 | ··<xccdf-1.2:status·date="2024-11-07">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of | 7 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 76, 91 lines modified | Offset 76, 75 lines modified | ||
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_pam"> | 78 | ····<cpe-lang:platform·id="package_pam"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | ||
| 83 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 87 | ········</cpe-lang:logical-test> | ||
| 88 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 89 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 90 | ········</cpe-lang:logical-test> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="package_systemd"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | ||
| 97 | ····</cpe-lang:platform> | ||
| 98 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_p | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 101 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="g | 95 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="package_sudo"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 110 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 129 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="package_audit"> | 115 | ····<cpe-lang:platform·id="package_audit"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | ||
| 136 | ····<cpe-lang:platform·id="package_chrony"> | ||
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | ||
| 140 | ····</cpe-lang:platform> | ||
| 141 | ····<cpe-lang:platform·id="package_yum"> | ||
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 124 | ········</cpe-lang:logical-test> | ||
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ········</cpe-lang:logical-test> | ||
| 144 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="machine_and_package_ufw"> | 130 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id="package_sudo"> | ||
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 155 | ······</cpe-lang:logical-test> | ||
| 156 | ····</cpe-lang:platform> | ||
| 157 | ····<cpe-lang:platform·id="aarch64_arch"> | 136 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 139 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 140 | ········</cpe-lang:logical-test> | ||
| 141 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 143 | ········</cpe-lang:logical-test> | ||
| 160 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | 146 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 165 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 166 | ········</cpe-lang:logical-test> | 150 | ········</cpe-lang:logical-test> |
| Offset 172, 57 lines modified | Offset 156, 73 lines modified | ||
| 172 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | 157 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 174 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 177 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 178 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 179 | ····<cpe-lang:platform·id="package_ | 163 | ····<cpe-lang:platform·id="package_systemd"> |
| 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| Max diff block lines reached; 507723/519677 bytes (97.70%) of diff not shown. | |||